Firewall Rule Issue

Started by dMopp, April 10, 2024, 12:00:52 AM

Previous topic - Next topic
April 10, 2024, 12:00:52 AM Last Edit: April 10, 2024, 12:17:32 AM by dMopp
Hi,

i have a (at least for me) strange issue:

I have a Setup with 2 Physical Interfaces and multiple VLANs.

The issue i have:
One host in the untagged (native) network is trying to reach the IPv6 fd11:192:168:10::10 (SERVERS VLAN) and gets no response, UNTIL i add a firewall rule INSIDE the SERVERS VLAN to allow traffic TO the native network. Even more strange: this only counts for IPv6. IPv4 does not have that kind of issues here (picmp, etc are fine). Any idea why only IPV6 is affected? All the rules i have are IPv4 AND ipv6 (triple checked) and adding the rule to the TARGET network does not seems to make any sense.


To rebuild this:

Have one Physical Interface with Multiple VLANs

Have a Host in the untagged network
Have a Host in the VLAN 10

Have a rule in untagged VLAN allow ALL traffic IP4/6 to VLAN10
IPv4 Ping works fine
IPv6 Ping not

The same works from another VLAN to the VLAN10 but not von UNTAGGED network to VLAn and ONLY for IPv6