search for: 71b2

...er spending many hours getting strongswan setup to match your config, I am not able to reproduce the issue on a 3.10 kernel. The IPv6 logs look normal: Jul 25 16:53:15 f19_main kernel: [ 1274.377650] IN= OUT=eth2 SRC=5857:0000:0000:0000:0000:0000:0000:0129 DST=fe80:0000:0000:0000:020c:29ff:fe5e:71b2 LEN=64 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 But what you are doing (default DROP policy in the POSTROUTING chain of the mangle table) is NOT recommended. For instance, I can see from your rules that you don't permit ICMPv6 packets from the link-local addresses. How exac...