Hi Ville, I added "dev wlan0" to my ipv6tunnel call, and recompiled both machines with your one line fix. This time I can ping each machine via wlan0 (hu, we didn't change anything over there), but still on the gateway the ip6sec0 tunnel interface has no ipv6 address by default. no matter what I do: I pinging via the ip6sec0 interface, but never see any packet outgoing via wlan0. never, ever. I added real ipv6 addresses to wlan0 on both sides, and configured the tunnel using those: no success. for testing I added some ip address to the ip6sec0 interface on the gateway, but that also didn't change anything. > Hmm, strange. Do you have the string "init ip6-ip6: add_linklocal failed" > somewhere in your logs? no, neither "init" nor "ip6-ip6" nor "add_linklocal" are found. > When I define global endpoints to the tunnel I can also ping link-local > addresses over the tunnel, but it seems that link-local over link-local > doesn't work at the moment. The packets reach the ip6_tunnel, but get > silently discarded after that. > > I'll look into this and see if anything can be done about it. > ah, great. Regards, Andreas - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html