I have an SSTP server that I use from time to time, and I had thought IPv6 was working over it, but it appears not to be and I’m not sure what the problem is. The clients are assigned a valid IPv6 address and the router has a route in place for it. But I can’t ping the router across the tunnel and I can’t access IPv6 sites on the internet.
[david@RoutyMcRouterson] > /ipv6 pool print
Flags: D - DYNAMIC
Columns: NAME, PREFIX, PREFIX-LENGTH, EXPIRES-AFTER
# NAME PREFIX PREFIX-LENGTH EXPIRES-AFTER
0 D ipv6-pool 2600:1700:7c50:3790::/60 64 47m12s
[david@RoutyMcRouterson] /ipv6> address print
Flags: D - DYNAMIC; G - GLOBAL, L - LINK-LOCAL
Columns: ADDRESS, FROM-POOL, INTERFACE, ADVERTISE
# ADDRESS FROM-POOL INTERFACE ADVERTISE
0 G fddc::100/64 wireguard1 no
1 G 2600:1700:7c50:3790::1/64 ipv6-pool vlan-lan yes
2 G 2600:1700:7c50:3791::1/64 ipv6-pool vlan-guest yes
3 DL fe80::bec1:da6a:de90:d3aa/64 wireguard1 no
4 D ::1/128 lo no
5 DL fe80::4aa9:8aff:fed0:92e3/64 vlan-guest no
6 DL fe80::4aa9:8aff:fed0:92e3/64 vlan-lan no
7 DL fe80::4aa9:8aff:fed0:92e3/64 bridge1 no
8 DL fe80::5a60:d8ff:fe6f:4b31/64 ATTbridge no
9 DL fe80::5aee:eb12:f0:4b/64 <sstp-davidvpn> no
[david@RoutyMcRouterson] > /ppp profile export
/ppp profile
add dns-server=10.9.0.1 interface-list=LAN local-address=10.9.0.1 name=sstp remote-address=sstp-vpn remote-ipv6-prefix-pool=ipv6-pool use-encryption=required use-mpls=no
When I connect, the client shows that its IPv6 router is fe80::4e9f:9bc1:f0:4b and that its IPv6 address is 2600:1700:7c50:3793:b9af:4cba:b4fc:b6a9/64, which is one of the /64s I get delegated in the /60 the ISP issues. But I can’t access any IPv6 sites and I can’t even ping the router at its fe80 link local address. Does anyone know what might be the problem?