I am running WireGuard on an OpenWrt-based router and facing an issue with IPv6 connectivity for VPN clients.
Setup:
The router is configured with WireGuard using IPv6.
The VPN address pool assigned to clients is a ULA prefix.
LAN clients and VPN clients can communicate with each other successfully (bidirectional reachability).
Issue:
VPN clients cannot access the internet over IPv6.
For example, ping6 google.com from a VPN client fails.
The packets appear to get dropped at the wg0 interface on the VPN server.
Could you please advise whether this is a limitation of using ULA addresses as the WireGuard client pool, or if there is an additional configuration required to enable IPv6 internet access for VPN clients?