IPv6 ICMP Ping and reachability of Clients

[burnz]

Just configured IPv6 on my 2. WAN connection on my MX67.

Everything works fine all IPv6 Test work like expected and every client gets their IPv6 address.

When trying ot Ping the IPv4 address of the WAN everything works fine, if i try to ping the IPv6 I dont get a reply.

Also I'm unable to reach the client IPv6 adresses from externally.

How do i fix this?

[alemabrahao]

Maybe this article can help.

https://documentation.meraki.com/?title=MX/Other_Topics/IPv6_Support_on_MX_Security_%26_SD-WAN_Platf...

[alemabrahao]

What MX version do you have installed?

[burnz]

MX67 with 17.6

[PhilipDAth]

>Also I'm unable to reach the client IPv6 adresses from externally.

I would not expect this to be allowed.  The firewall should block traffic inbound by default.

There is a feature called "Layer 3 inbound rules" that support can enable, but I don't know if this supports IPv6 firewall rules.

[burnz]

At the firewall i allowed ICMP Ping for IPv6 inbound at the layer3 rules.