IPv6 static route ignored based on firewall rule placement
-
This has taken me many many hours to troubleshoot and the issue is that an IPv6 static route is not being honored when the ACL rule for that traffic is assigned to an interface. However is the ACL is put in the Floating section then the IPv6 static route is honored.
I have attached the test mockup network diagram and the pfSense relevant configuration. The proof is in the tcpdump. When the radius packet allow rule is in the Floating section the reply packet has a return MAC address of the Linux router which is correct based on the static route. How ever if I move the rule to the WAN interface the radius reply packet has a return MAC address of the default gateway so the server never gets the return packet.
This seems like a bug. Please help.
Thanks
Todd
