Here is some detailed information. On the firewall eth0 + eth1 = br0, eth2 is the private land and eth3 is a data lan. I have yet to put any IPV6's on those lans, but they too will have a /64 of the /48 when the time comes. I have also enabled forwarding in /proc/sys/net/ipv6/conf/all/forwarding. In iptables, the first two rules for both forward and input are to allow -p IPV6 and -p IPV6-ICMP.
Server IPv6 address: 2001:470:1f04:159d::1/64
Client IPv6 address: 2001:470:1f04:159d::2/64
Routed /48: 2001:470:852c::/48
Routed /64: 2001:470:1f05:159d::/64
Firewall:
6: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
inet6 2001:470:852c:1::1/64 scope global
valid_lft forever preferred_lft forever
inet6 2001:470:1f05:159d::1/64 scope global
valid_lft forever preferred_lft forever
7: sit1@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue
link/sit 0.0.0.0 peer 72.52.104.74
inet6 2001:470:1f04:159d::2/64 scope global
valid_lft forever preferred_lft forever
Kernel IPv6 routing table
Destination Next Hop Flags Metric Ref Use Iface
::/96 :: U 256 0 0 sit0
2001:470:1f04:159d::/64 :: U 256 2 0 sit1
2001:470:1f05:159d::/64 :: U 256 0 0 br0
2001:470:852c:1::/64 :: U 256 0 0 br0
fe80::/64 :: U 256 0 0 eth2
fe80::/64 :: U 256 0 0 br0
fe80::/64 :: U 256 0 0 sit1
::/0 :: U 1 0 0 sit1
ff02::1:2/128 ff02::1:2 UC 0 13 0 br0
ff00::/8 :: U 256 0 0 eth2
ff00::/8 :: U 256 0 0 br0
ff00::/8 :: U 256 0 0 sit1
A DMZ Server:
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
inet6 2001:470:1f05:159d::3/64 scope global
valid_lft forever preferred_lft forever
Kernel IPv6 routing table
Destination Next Hop Flags Metric Ref Use Iface
2001:470:1f05:159d::/64 :: U 256 1 0 eth0
fe80::/64 :: U 256 0 0 eth0
::/0 2001:470:1f05:159d::1 UG 1 22 0 eth0
::1/128 :: U 0 90828 1 lo
2001:470:1f05:159d::3/128 :: U 0 4 1 lo
fe80::250:56ff:feb1:9cb/128 :: U 0 162 1 lo
ff00::/8 :: U 256 0 0 eth0
[root@ipv6dev1 ~]# ping6 2001:470:1f04:159d::1 -c 1 -w 3
PING 2001:470:1f04:159d::1(2001:470:1f04:159d::1) 56 data bytes
--- 2001:470:1f04:159d::1 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2068ms
[root@ipv6dev1 ~]# ping6 2001:470:1f04:159d::2 -c 1 -w 3
PING 2001:470:1f04:159d::2(2001:470:1f04:159d::2) 56 data bytes
64 bytes from 2001:470:1f04:159d::2: icmp_seq=0 ttl=64 time=0.191 ms
--- 2001:470:1f04:159d::2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.191/0.191/0.191/0.000 ms, pipe 2
[root@ipv6dev1 ~]# traceroute -n 2001:470:1f04:159d::1
traceroute to 2001:470:1f04:159d::1 (2001:470:1f04:159d::1), 30 hops max, 40 byte packets
1 * * *
2 * * *
3 * * *
4 * * *
5 * * *