My Android application can now access the protected network in the Ziti network through a custom domain name (e.g., www.test.com). Now, I want the Android application to access the protected network via IP addresses (e.g., 172.168.1.123 or ff00::123). How should I modify it?
In the intercept.v1 of ZAC, I have set up multiple addresses, such as www.svc1.com , ssssdd , ff00::222 , and 192.168.1.123 . Now the IP addresses are not working.
100.64.1.5 is accessible
All you should need to do is add the ip into the intercept config as you did. Assuming you entered them correctly, it's possible there's some bug with IP addresses in the android tunneler (or maybe with how zac updated the controller).
Can you show us the intercept config, as it exists right now, in json format?
{
"_links": {
"self": {
"href": "./configs/6VGBuAUKcw50niSQhm6MwI"
}
},
"createdAt": "2024-07-08T07:00:37.022Z",
"id": "6VGBuAUKcw50niSQhm6MwI",
"tags": {
},
"updatedAt": "2024-07-11T10:04:56.205Z",
"configType": {
"_links": {
"self": {
"href": "./config-types/g7cIWbcGg"
}
},
"entity": "config-types",
"id": "g7cIWbcGg",
"name": "intercept.v1"
},
"configTypeId": "g7cIWbcGg",
"data": {
"addresses": [
"www.svc1.com",
"www.ccc.com",
"fc00::222",
"192.168.1.123"
],
"dialOptions": {
"connectTimeoutSeconds": 0,
"identity": ""
},
"portRanges": [
{
"high": 3000,
"low": 3000
}
],
"protocols": [
"tcp"
],
"sourceIp": ""
},
"name": "svc1-i"
}
Thank you for confirming the config looks ok. I wonder if the android tunneler supports ipv6. We will have to test this on our side. Thanks for letting us know.
In the Android project, there are no errors visible, and when accessing through the domain name, I can see the dial-up logs, but there are no logs for accessing through the IP address.
When both IPv4 and IPv6 addresses are configured, access fails, but the domain name works fine.
IPv6 intercepts are not supported yet by ZME on Android.
IPv4 intercepts should work. Let me do some research here.
Thank you, I konw. about ipv6 intercepts, After setting up the VPN service router, I can get IPv6 packets. I was thinking that if I could convert the IPv6 packets into IPv4 packets, then I could redirect them to 100.64.1.5. Is this idea feasible?
addAddress(InetAddress.getByName("fc00::222"), 64)
addRoute("::", 0)
Excuse , is there any progress ?
ipv4 IP is OK, i changed error