Question
static IPv6 address won't work without nat turned on
My ISP has given me a static /48 range of IPv6 addresses. I enabled IPv6 and gave wan1 an IPv6 address and was able to ping6 google.com. I gave my LAN interface a IPv6 address, added a static IPv6 route, setup my windows 2016 DHCP server to give out IPv6 addresses and DNS settings. My computers get an address from my DHCP server but they can't ping or access the IPv6 internet unless NAT is turned on my lan to wan IPv6 Policy. What am I doing wrong?
config system interface
edit "wan1"
set vdom "root"
set ip 10.10.10.10 255.255.255.240
set allowaccess ping
set type physical
set role wan
set snmp-index 1
config ipv6
set ip6-allowaccess ping
set ip6-address 2001:1111:2222:8a00::2131/64
end
next
edit "lan"
set vdom "root"
set ip 10.10.11.1 255.255.255.0
set allowaccess ping https ssh snmp
set type hard-switch
set device-identification enable
set role lan
set snmp-index 11
config ipv6
set ip6-allowaccess ping https ssh
set ip6-address 2001:1111:2222:8a02::1/64
set ip6-send-adv enable
set ip6-manage-flag enable
set ip6-other-flag enable
config ip6-prefix-list
edit 2001:1111:2222:8a02::/64
set onlink-flag enable
next
end
end
next
end
config router static6
edit 1
set gateway 2001:1111:2222:8a00::1
set device "wan1"
next
end
config system dns
set primary 12.127.16.67
set secondary 12.127.17.71
set ip6-primary 2620:0:ccc::2
set ip6-secondary 2620:0:ccd::2
end