IPV6 Problem

[rb504c]

My Above setup is working perfect for IPv4 and BGP.

Its not working so great for my IPv6

I can ping out to the internet from the the Edge, Primary, and COLO firewalls (all pfsense)

But when i try to do DHCP6 for the Internal Networks nothing works. I dont get a router for internet but i do get an IP address.

RA : Managed
Router Priority: high
RA Subnet : None

DNS: Use SAME settings as DHCPv6 Server.
When i try to ping the internal interface of the Primary or COLO Firewall i dont even get a ping response. ( i have a floating rule that allows all ICMP on all interfaces)

Should i change my setup to let the edge routed just do DHCPv6 and move on from there and is there any examples of the setup i should use. I am new to IPv6 but not networking. im trying to get all of our offices to ipv6 but this is proving very problematic

[doktornotor]

What is that /80 on the LANs? Do not do such things, ever. Anything smaller than /64 is not routable.

P.S. I noticed you mentioned BGP. Not really sure what you are trying to do. You'll have a hard time getting prefixes longer that /32 globally routable, RFCs or not.

[rb504c]

@doktornotor:

What is that /80 on the LANs? Do not do such things, ever. Anything smaller than /64 is not routable.

P.S. I noticed you mentioned BGP. Not really sure what you are trying to do. You'll have a hard time getting prefixes longer that /32 globally routable, RFCs or not.

Per you reply i checked. You are right. My BGP is not announcing the /48 because the IPv6 pool was provided by comcast. So im working on getting a /32 from ARIN atm

Pulling BGP out of the equation i have this setup (per you comment about anything smaller then /64 is not routeable)

Now i can ping devices on the same network.
ie: LAN Device can ping LAN Gateway

but i ran into a new issue. LAN Device cant ping Edge Firewall or any of the external interfaces

ie: X:X:X:1000::5 can not ping X:X:X:F000:1 or X:X:X:F000:3 but can ping X:X:X:F000:2

is there any other information i need to provide for the example?

Edge Router has a IPV6 Any to Any Rule

Both Firewall have IPV6 ICMP from Any as Allowed.

the Edge Firewall has Gateways setup and showing the firewalls as up. I have a feeling I am missing something really basic here and its make me feel stupid.

is there an easier way to do this ??

with prefix delegation and or DHCPv6 on the edge firewall?

[hda]

Yes, your edge firewall is a master holding the /48. Request by slave DHCP(PD).

Stop the /52-ing internal. Peel off /64-ers from your comcast /48. Stick to /64 routing.