IPv6 Default Gateway Selects Wrong Physical Interface

[iamGavinJ]

Hi All,

I finally got around to getting my Hurricane tunnel working last night and came across an issue which I wasn't sure was already a known bug.  I searched Redmine and the forums and couldn't find this existing already though I wanted to raise it here first to avoid logging a dupe in redmine.

Environment is:

FreeBSD <fqdn>8.3-RELEASE-p6 FreeBSD 8.3-RELEASE-p6 #0: Sat Feb 23 05:30:28 EST 2013     root@snapshots-8_3-i386.builders.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_SMP.8  i386</fqdn> 

I have not git-synced beyond that snap either.

After following the guide here (http://doc.pfsense.org/index.php/Using_IPv6_on_2.1_with_a_Tunnel_Broker) I was able to ping6 the remote side of the tunnel from the OPT interface, however when I tried to ping from the LAN interface (with the appropriate routed /64 set up) I was getting a host not reachable (from memory).  I also could not route any traffic from my LAN outbound nor get a response inbound using the HE IP6 port scanner.  I set up a firewall rule to log allow and log incoming from HE and could see the traffic hitting the OPT interface but nothing would route.

After looking at the routing tables I noticed that the default gateway to the correct HE IPv6 address had an incorrect physical interface (my LAN interface ue0 instead of the tunnel gif0) effectively black-holing the packets:

netstat -rw
Internet6:
Destination                                    Gateway                                     Flags    Refs      Use    Mtu    Netif Expire
default                                         <fqdn of="" he="">UGS         0      420   1280      ue0
::1                                            ::1                                         UH          0        0  16384      lo0</fqdn> 

I then executed:

route delete -inet6 default
route -n add -inet6  default 2001:xxxx:yyyy:zzzz::1

and now the route looks like this and the packets route correctly:

Internet6:
Destination                                    Gateway                                     Flags    Refs      Use    Mtu    Netif Expire
default                                         <fqdn of="" he="">UGS         0        1   1280     gif0
::1                                            ::1                                         UH          0        0  16384      lo0</fqdn> 

If this isn't a known issue already please let me know and I'll raise it on Redmine, but I at least wanted to publish the issue as I spent a few hours scratching my head and couldn't find anything online to help.