IPv6 Setup with Firewall - Connecting 2 different networks using Firewall

[Jermy Franklin]

Hi,

I am trying to setup a small IPv6 lab with a Switch, Firewall & Router. Switch having one LAN segment & Router having one LAN segment between them there is a firewall and after all configurations setup Im tried to reach router LAN(2001:610:2222:2) from Switch LAN(2001:610:1000::3) vice-versa but not able to reach them via ping or mstsc(remote). Here is my setup diagram and I've attached my Switch, Router, Firewall Configuration so can anybody analyse them and help me to connect those different network using a firewall between them. I've attached Firewall connection log also when trying to take remote of Router LAN from Switch LAN.

Regards,

Jermy Franklin

[Harold Ritter · Accepted solution]

Hi Jermy,

Unlike in ipv4, in ipv6 a static route with only the egress interface should only be used on a point to point interface. This is because ipv4 has concept of proxy arp, which ipv6 doesn't have. For your config to work, you should add the next-hop ipv6 address to your static route as follow:

router:

ipv6 route ::/0 2001:610:1111::2

switch:

ipv6 route ::/0 2001:610:1000::2

Hope this helps

[Jermy Franklin]

Hi Ritter,

Thanks Buddy., It is working now