Beginner Ipv6 routing (ping) problem

Hello everyone,

i am new to ipv6 and have some issues routing a subnet with my Mikrotik. I’m trying to create a subnet behind my ISP-Router, but so far without success.

Internet --- [ISP-Router] --- (ether1)[MyRouter=750GL](bridge) --- [MyClient(Windows)]
                       \ [Client1]
                       \ [...]

I found some threads on this forum with similar symptoms but the solutions are not working for me. I don’t have any other routers in range of MyClient and MyClient receives RAs only from the 750GL router (checked with Wireshark).
The problem is that i cannot ping any external ipv6-address from MyClient.

But i can:
ping from MyRouter to any external ipv6-address (i.e. 2001:4860:4860::8888)
ping from MyRouter to MyClient via global-address and via link-local
ping from MyClient to MyRouter via global-address and via link-local

Here is my configuration:

> ipv6 export verbose hide-sensitive
# feb/03/2019 22:30:33 by RouterOS 6.43.8
#
# model = 750GL
#
/ipv6 address
add address=::1/64 advertise=yes disabled=no eui-64=no from-pool=dhcp6-pool interface=bridge no-dad=no

/ipv6 dhcp-client
add add-default-route=yes default-route-distance=1 dhcp-options="" disabled=no interface=ether1 pool-name=dhcp6-pool pool-prefix-length=64 prefix-hint=::/62 request=prefix use-peer-dns=yes

/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes disabled=no hop-limit=unspecified interface=bridge managed-address-configuration=no mtu=unspecified other-configuration=no ra-delay=3s ra-interval=10s-20s ra-lifetime=30m reachable-time=unspecified retransmit-interval=unspecified

/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d

/ipv6 settings
set accept-redirects=yes-if-forwarding-disabled accept-router-advertisements=yes-if-forwarding-disabled forward=yes max-neighbor-entries=8192



> ipv6 pool print detail
Flags: D - dynamic
 0 D name="dhcp6-pool" prefix=2a02:908:XXXX:e77c::/62 prefix-length=64 expires-after=6d23h54m38s



> ipv6 address print detail
Flags: X - disabled, I - invalid, D - dynamic, G - global, L - link-local
 0  G address=2a02:908:XXXX:e77c::1/64 from-pool=dhcp6-pool interface=bridge actual-interface=bridge eui-64=no advertise=yes no-dad=no

 1 DL address=fe80::4e5e:cff:fed4:a612/64 from-pool="" interface=bridge actual-interface=bridge eui-64=no advertise=no no-dad=no

 2 DL address=fe80::4e5e:cff:fed4:a611/64 from-pool="" interface=ether1 actual-interface=ether1 eui-64=no advertise=no no-dad=no



> ipv6 nd print detail
Flags: X - disabled, I - invalid, * - default
 0  * interface=bridge ra-interval=10s-20s ra-delay=3s mtu=unspecified reachable-time=unspecified retransmit-interval=unspecified ra-lifetime=30m hop-limit=unspecified advertise-mac-address=yes advertise-dns=yes managed-address-configuration=no other-configuration=no



> ipv6 nd prefix  print detail
Flags: X - disabled, I - invalid, D - dynamic
 0  D prefix=2a02:908:XXXX:e77c::/64 interface=bridge on-link=yes autonomous=yes valid-lifetime=4w2d preferred-lifetime=1w



> ipv6 route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
 0 ADS  dst-address=::/0 gateway=fe80::5667:51ff:fe73:82b2%ether1 gateway-status=fe80::5667:51ff:fe73:82b2%ether1 reachable distance=1 scope=30 target-scope=10

 1 ADSU dst-address=2a02:908:XXXX:e77c::/62 type=unreachable distance=1

 2 ADC  dst-address=2a02:908:XXXX:e77c::/64 gateway=bridge gateway-status=bridge reachable distance=0 scope=10

ipconfig /all from MyClient

Ethernet-Adapter Ethernet:

   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : Intel(R) Ethernet Connection I217-V
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja
   IPv6-Adresse. . . . . . . . . . . : 2a02:908:XXXX:e77c:853b:e403:YYYY:18bc(Bevorzugt)
   Temporäre IPv6-Adresse. . . . . . : 2a02:908:XXXX:e77c:78bc:1a1c:bd38:f6f6(Bevorzugt)
   Verbindungslokale IPv6-Adresse  . : fe80::853b:e403:YYYY:18bc%16(Bevorzugt)
   IPv4-Adresse  . . . . . . . . . . : 192.168.88.254(Bevorzugt)
   Subnetzmaske  . . . . . . . . . . : 255.255.255.0
   Lease erhalten. . . . . . . . . . : Montag, 4. Februar 2019 18:22:41
   Lease läuft ab. . . . . . . . . . : Montag, 4. Februar 2019 18:47:41
   Standardgateway . . . . . . . . . : fe80::4e5e:cff:fed4:a612%16
                                       192.168.88.1
   DHCP-Server . . . . . . . . . . . : 192.168.88.1
   DHCPv6-IAID . . . . . . . . . . . : 5798...
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-1F-19-65-...
   DNS-Server  . . . . . . . . . . . : 192.168.88.1
                                       192.168.10.1
   NetBIOS über TCP/IP . . . . . . . : Aktiviert

According to some web-tutorials and other threads on this forum this should work, or am i missing something?

Has nobody an ipv6 configuration running?

Hey

So, your router can ping internet. And you can ping router, on global address. → question: is routing or firewall on router “wrong”?

route seems ok.

So how about firewall? /ipv6 firewall export?