Op 20-4-2016 om 18:38 schreef Olivier Mascia: > Dear all, > > I must be tired or something but I have a strange thing with IPv6 on a new > box I just setup. > > Have a x:y:z:d800::/56 routed to me. > WAN is static IPv6 on x:y:z:d800::1/64, gateway is > x:y:z:d800::ffff:ffff:ffff:ffff (not a nice one but that is what they gave > me). > LAN is static IPv6 on x:y:z:d801::1/64, no gateway as usual for LAN interface. > > From a host on the LAN side, at x:y:z:d801::100 (or any other), I can reach > pf LAN interface on x:y:z:d801::1, I can also reach pf WAN interface on > x:y:z:d800::1, but I can't get a packet to go further. > > Yet, from pf itself, I can reach (ping for instance) www.google.com (IPv6) > from WAN interface, but not from LAN interface. > > I would have thought "ok I miss a pass rule on the LAN interface", but there > is one. This by far is not my first pfSense box, and they all have various > kind of IPv6 links. Not that I couldn't be awfully wrong somewhere. So what > obvious detail am I overlooking here? If you have any idea? >
Do you have radvd configured (from the DHCP6 settings) so that clients on the lan can find the gateway? Or is the client statically configured? If you only do DHCP6d on pfSense but no RADVD no clients will end up with a route. Kind regards, Seth _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
