I can't seem to route past nlams04, I can ping the remote end of the tunnel (the "1" address but nothing further. A tcpdump from the firewall of a single icmp packet destined for www.kame.net produced the below. (real IP replaced for xxx) firewall# tcpdump -ni gif0 tcpdump: WARNING: gif0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on gif0, link-type NULL (BSD loopback), capture size 96 bytes 19:53:30.987228 IP6 2001:960:2:xxx::2 > 2001:200:0:8002:203:47ff:fea5:3085: ICMP6, echo request, seq 0, length 16 19:53:31.024707 IP6 2001:960:2:xxx::1 > 2001:960:2:xxx::2: ICMP6, destination unreachable, unreachable route 2001:200:0:8002:203:47ff:fea5:3085, length 64 19:53:35.985765 IP6 2001:960:2:xxx::2 > 2001:960:2:xxx::1: ICMP6, neighbor solicitation, who has 2001:960:2:xxx::1, length 24 19:53:36.026515 IP6 2001:960:2:xxx::1 > 2001:960:2:xxx::2: ICMP6, neighbor advertisement, tgt is 2001:960:2:xxx::1, length 24