RTRDT#sh access-l Extended IP access list 101 10 permit icmp any any RTRDT#deb ip packet 101 IP packet debugging is on for access list 101 *Mar 1 00:09:37.935: IP: tableid=0, s=10.11.0.2 (Virtual-Access2), d=10.0.0.1 (Loopback0), routed via RIB *Mar 1 00:09:37.935: IP: s=10.11.0.2 (Virtual-Access2), d=10.0.0.1, len 28, rcvd 4 *Mar 1 00:09:37.935: IP: tableid=0, s=10.0.0.1 (local), d=10.11.0.2 (Virtual-Access2), routed via FIB *Mar 1 00:09:37.935: IP: s=10.0.0.1 (local), d=10.11.0.2 (Virtual-Access2), len 28, sending RTRDT#deb ip icmp ICMP packet debugging is on RTRDT# *Mar 1 00:09:42.443: ICMP: echo reply sent, src 10.0.0.1, dst 10.11.0.2 *Mar 1 00:09:43.399: ICMP: echo reply sent, src 10.0.0.1, dst 10.11.0.2
RTRDT#sh ip route | i Access S 10.11.0.2/32 [1/0] via 0.0.0.0, Virtual-Access2
ping are received and ping reply appear to be routed correctly, but they never reaches my client, and seem not to reach even RTL1 router. maybe some of ou may have ideas of other debugs I could use to see if packets are dropped at RTRDT or RTL1.
On RTL1, due to nat, debug ip packet give nothing.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...