 whfsdudePremium
join:2003-04-05
Washington, DC
 ·T-Mobile US
| reply to JoelC707
Re: [IPv6] Seeing two different LAN side rangesLooking at the code (no longer running PD here). It looks like firewall rules get added now and don't show via the GUI for PD. Which is maybe why it now works out of the box without adding the WAN rule.
cat /tmp/rules.debug
# Automatic Pass rules for any delegated IPv6 prefixes through dynamic IPv6 clients
pass in quick on $LAN inet6 from [pd_prefix] to any keep state label "Allow IPv6 on LAN to any"
pass in quick on $WAN inet6 from any to [pd_prefix] keep state label "Allow IPv6 in on WAN to [pd_prefix]"
|
