IPV6 routing to client through tunnel

[bartjsmit]

Server config with:

server-ipv6 fd4e:122c:460d::/64
push "route-ipv6 fd4e:122c::/32"

I have an ipv6 LAN subnet fd4e:122c:84f2:948a::/64 behind a client and routes are set on the server for this subnet:

ip -6 route add fd4e:122c:84f2:948a::/64 via fd4e:122c:460d::1001 dev tun0

I can ping the client on its tunnel interface fd4e:122c:460d::1001 and I see the packets arriving at the client with tcpdump. I can ping the other way around as well. I can ping the server's LAN IP through the tunnel from the client's tunnel IP.

I cannot ping the client subnet from the server, nor the server from the client's LAN IP. no packets show up on the other side with tcpdump.

How can I route through openvpn?

[bartjsmit]

Okay, I'm a numpty - stopping firewalld fixed it. Apparently adding an interface to the trusted zone is not enough.

Still amazing how cranky ndp gets without icmp6

Bart...