<![CDATA[IPv6 Not able to ping WAN to LAN]]>WAN IP: 2001:df7:7640:a000::6/64
LAN IP:  2001:df7:7640:bc4a::1/64
Client IP: 2001:df7:7640:bc4a:a2ef:a000:ba00::1/64

Firewall rule in LAN port
Allow all ipv6
any source
any destination

But I am not able to reach internet on ipv6.
I am able to ping WAN port though of pfsense though

]]>https://forum.netgate.com/topic/130472/ipv6-not-able-to-ping-wan-to-lanRSS for NodeMon, 13 Apr 2026 04:23:11 GMTThu, 03 May 2018 17:34:27 GMT60<![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Wed, 09 May 2018 13:52:00 GMT]]>It is reaching upto my WAN port of Pfsense
I am not authorized to share IP details

]]>https://forum.netgate.com/post/765003https://forum.netgate.com/post/765003Wed, 09 May 2018 13:52:00 GMT<![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 15:40:27 GMT]]>Well impossible to help you without being able to see if traffic gets to your wan or not, etc.  In a traceroute.

PM me your actual IPs

]]>https://forum.netgate.com/post/764253https://forum.netgate.com/post/764253Fri, 04 May 2018 15:40:27 GMT<![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 15:38:44 GMT]]>Don't worry I have changed my IP while posting query for security reasons, my actual ip is routable and has a very clear route-object

@johnpoz:

where did you come up with those addresses.  I don't show any AS number for your wan IP

No AS number was found for 2001:df7:7640:a000::6
No AS number was found for 2001:df7:7640:bc4a::1

You can not just make numbers up?  And use them…

]]>https://forum.netgate.com/post/764252https://forum.netgate.com/post/764252Fri, 04 May 2018 15:38:44 GMT<![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 15:35:45 GMT]]>where did you come up with those addresses.  I don't show any AS number for your wan IP

No AS number was found for 2001:df7:7640:a000::6
No AS number was found for 2001:df7:7640:bc4a::1

You can not just make numbers up?  And use them…

]]>https://forum.netgate.com/post/764251https://forum.netgate.com/post/764251Fri, 04 May 2018 15:35:45 GMT<![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 14:50:23 GMT]]>@johnpoz:

What policy?? Post up your rules..  Both lan and wan

![Screen Shot 2018-05-04 at 8.19.25 PM.png](/public/imported_attachments/1/Screen Shot 2018-05-04 at 8.19.25 PM.png)
![Screen Shot 2018-05-04 at 8.19.25 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2018-05-04 at 8.19.25 PM.png_thumb)
![Screen Shot 2018-05-04 at 8.18.55 PM.png](/public/imported_attachments/1/Screen Shot 2018-05-04 at 8.18.55 PM.png)
![Screen Shot 2018-05-04 at 8.18.55 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2018-05-04 at 8.18.55 PM.png_thumb)

]]>https://forum.netgate.com/post/764239https://forum.netgate.com/post/764239Fri, 04 May 2018 14:50:23 GMT<![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 14:47:43 GMT]]>
  • Yes my Client is able to ping both LAN port of pfsense and WAN port of pfsense but nothing beyond it
  • If i login to pfsense, I am able to ping anything on Ipv6 from pfsense shell

    • @johnpoz:

    Can your client ping your lan ipv6 IP?  Your going to need to post up your rules for your lan and your wan if you want someone to help you point out what your doing wrong.

    Out of the box lan allows any any ipv6 on lan… So if your client is getting a vlan ipv6 on your lan segment it should be able to ping your lan ipv6 and your wan ipv6.

    From the outside.. Nobody would be able to ping your wan ipv6 or your clients behind it on your lan unless you allow for it.

    ]]>    https://forum.netgate.com/post/764238https://forum.netgate.com/post/764238Fri, 04 May 2018 14:47:43 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 14:47:00 GMT]]>What policy?? Post up your rules..  Both lan and wan

    ]]>    https://forum.netgate.com/post/764237https://forum.netgate.com/post/764237Fri, 04 May 2018 14:47:00 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 14:46:12 GMT]]>ubuntu@ipv6testBed:~$ ip -6  route show
    2001:df7:7640:bc4a::/64 dev ens18  proto ra  metric 100  pref medium
    fe80::/64 dev ens18  proto kernel  metric 256  pref medium
    default via fe80::21a:64ff:fe78:e820 dev ens18  proto static  metric 100  pref medium

    ]]>    https://forum.netgate.com/post/764236https://forum.netgate.com/post/764236Fri, 04 May 2018 14:46:12 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 14:37:04 GMT]]>I am able to ping following from my machine

    1. LAN gateway ie LAN port of Pfsense
    2. WAN Port of pfsense from LAN
    3. WAN port of pfsense from Internet

    I am not able to ping

    1. anything other than WAN port  such as 2001:4860:4860::8888 ( Google DNS is not ping)
    2. I am not able to ping my LAN port from Internet
      even though policy is IPv6 any to any
    ]]>    https://forum.netgate.com/post/764235https://forum.netgate.com/post/764235Fri, 04 May 2018 14:37:04 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Fri, 04 May 2018 01:32:51 GMT]]>What does netstat -r show for the default route on IPv6?  It should be a link local address, as that's what IPv6 normally uses for routing.

    ]]>    https://forum.netgate.com/post/764122https://forum.netgate.com/post/764122Fri, 04 May 2018 01:32:51 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Thu, 03 May 2018 18:49:41 GMT]]>Can your client ping your lan ipv6 IP?  Your going to need to post up your rules for your lan and your wan if you want someone to help you point out what your doing wrong.

    Out of the box lan allows any any ipv6 on lan… So if your client is getting a vlan ipv6 on your lan segment it should be able to ping your lan ipv6 and your wan ipv6.

    From the outside.. Nobody would be able to ping your wan ipv6 or your clients behind it on your lan unless you allow for it.

    ]]>    https://forum.netgate.com/post/764078https://forum.netgate.com/post/764078Thu, 03 May 2018 18:49:41 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Thu, 03 May 2018 18:45:57 GMT]]>WAN Also IPv6 any is allowed
    I am not able to send any packet from LAN to WAN
    Nor WAN to LAN on IPv6

    ]]>    https://forum.netgate.com/post/764076https://forum.netgate.com/post/764076Thu, 03 May 2018 18:45:57 GMT    <![CDATA[Reply to IPv6 Not able to ping WAN to LAN on Thu, 03 May 2018 17:58:57 GMT]]>And what are the rules on your wan.. Do allow ipv6 through to this clients IP

    Out of the box pfsense is not going to allow anything into wan… So no you would not be able to ping through to ipv6 unless you allow it.

    ]]>    https://forum.netgate.com/post/764065https://forum.netgate.com/post/764065Thu, 03 May 2018 17:58:57 GMT