allow nat64

templates/frr_conf.j2

@@ -150,11 +150,12 @@ ipv6 prefix-list my-networks seq {{(loop.index|int)*10+10}} deny any
 {%   endif %}
 {% endfor %}
 !
+ipv6 prefix-list internal seq 10 permit 64:ff9b::/96
 {% for range in dc_ranges + anycast_ranges %}
-ipv6 prefix-list internal seq {{(loop.index|int)*20-10}} permit {{range}}
-ipv6 prefix-list internal seq {{(loop.index|int)*20}} permit {{range}} ge {{((range|regex_replace('.*/',''))|int)+1}}
+ipv6 prefix-list internal seq {{(loop.index|int)*20}} permit {{range}}
+ipv6 prefix-list internal seq {{(loop.index|int)*20+10}} permit {{range}} ge {{((range|regex_replace('.*/',''))|int)+1}}
 {%   if loop.last %}
-ipv6 prefix-list internal seq {{(loop.index|int)*20+10}} deny any
+ipv6 prefix-list internal seq {{(loop.index|int)*20+20}} deny any
 {%   endif %}
 {% endfor %}
 !