IPv6 Delegated Prefix Not Routing
-
Hello,
I've got a delegated IPv6 Prefix to a secondary router and I'm having trouble getting my clients to have internet access through that router with the delegated prefix:
I've got a firewall rule that allows this prefix to go to any address using any protocol and I enabled logging so I can clearly see that isn't the issue. I only get a /60 from my ISP (AT&T) so I'm delegating a /62 to my other router.
but pings from clients fail:
basically I'm asking what the best way to trouble shoot this further is because what has me really confused is that pings from the firewall are fine so it clearly has a valid address -
That other router would have a different subnet. Is there a route from pfSense to it?
-
@JKnott the other router has ipv6 connectivity (can ping) it’s just the clients from that router that don’t as they are using the prefix I have delegated
-
Again, pfSense has to know the route to that subnet. It knows where that interface is, but not what's beyond it.
Here's an example, though it's for IPv4 only.
In order to access that 172.16.2.0 network, I had to tell pfSense where to find it. You may see your pings go out, but how far do you see the replies coming pack? You can use Packet Capture to watch for them. I bet you see them come into pfSense, but then what??? Without a route, pfSense cannot send them where they're supposed to go.
I assume that delegated prefix is provided by your ISP.