Sophos XG behind Cable Fritzbox 6490 and IPV6

You can't have the same /64 on both interfaces, that's never going to work.  Same rules apply as in IPv4, use a different /64.

Or, use the XG in bridge mode.  I use it that way and works fine for v4 and v6.

could you post some screenshots of your config?

DavidWilliams1 wrote:   "Same rules apply as in IPv4"
Big change, there's no NAT!  This requires full routing, so fritzbox requires a route to your LAN.

could you post an example please. i am stuck with this for 4 days ;(

Mario Ostwald said:

could you post some screenshots of your config?

 

Hi Mario,

Show me a picture of the interface configuration and WAN Link Manager> IPv6 definition.

Verify connectivity by taking console access to XG:

ping6 <ipaddress6> <interface>- Ping to verify connectivity through the tunnel.

Thanks

Hi,

From the WAN link Manager page, it shows that the IPv6 link is green which means connected. Please show me the inside configuration of the Interface for IPv6 and the WAN link manager.

Try the ping tool I suggested and check the connectivity. Also, check #1 in my guide here, to see if there are any drops for IPv6 traffic. Verify if the TCP communication through tcpdump by executing the command from the console: tcpdump '-n ipv6'

Thanks

got it working in bridge mode..

why is gateway not working?

any disadvantages in bridge mode?

Mario Ostwald said:

why is gateway not working?

I suspect there is something wrong on how you sliced the /59.   In some of the screenshots, I see :780: on both WAN an LAN.  If you were to try it again, I would suggest going to an online IPv6 subnet calculator and put in your /59 and double check that you are using unique /64's on the WAN and LAN ... with the appropriate default route and route back from Fritz.

Mario Ostwald said:

any disadvantages in bridge mode?

See here:  bridge-mode-limitations

Glad it's working!!!