Moin!
ich habe nun noch etwas umgetestet... Werde nur nicht schlau draus. 
Wenn ich von einem rpi mittels wget auf die UI zugreife, bekomme ich das hier:
pi@pizero:~ $ wget https://[2003:xx:xxxx:xxxx:xxxx:xxxx:fed3:943d]:8443
--2024-01-27 10:30:09-- https://[2003:xx:xxxx:xxxx:xxxx:xxxx:fed3:943d]:8443/
Connecting to [2003:xx:xxxx:xxxx:xxxx:xxxx::fed3:943d]:8443... connected.
ERROR: The certificate of ‘2003:xx:xxxx:xxxx:xxxx:xxxx::fed3:943d’ is not trusted.
ERROR: The certificate of ‘2003:xx:xxxx:xxxx:xxxx:xxxx::fed3:943d’ doesn't have a known issuer.
The certificate's owner does not match hostname ‘2003:xx:xxxx:xxxx:xxxx:xxxx:fed3:943d’
Das Netzwerk des CK2+ ist so definiert:
root@UCK-G2-Plus:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: sit0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default
link/sit 0.0.0.0 brd 0.0.0.0
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 74:83:c2:d3:94:3d brd ff:ff:ff:ff:ff:ff
inet 10.10.67.16/16 brd 10.10.255.255 scope global dynamic eth0
valid_lft 50117sec preferred_lft 50117sec
inet6 2003:xx:xxxx:xxxx:xxxx:xxxx::fed3:943d/64 scope global dynamic mngtmpaddr noprefixroute
valid_lft 86017sec preferred_lft 14017sec
inet6 fe80::xxxx:xxxx:fed3:943d/64 scope link
valid_lft forever preferred_lft forever
Alles anzeigen
Stehe auf dem Schlauch... 
Und noch ein paar Infos:
LAN Firewalls
--------------------------------------------------------------------------------
IPv6 Firewall "LANv6_IN" [packets from intranet]
Active on (eth0,IN) (eth1,IN) (eth3,IN)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 22205167 12695230815 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "LANv6_LOCAL" [packets from intranet to gateway]
Active on (eth0,LOCAL) (eth1,LOCAL) (eth3,LOCAL)
rule packets bytes action description
---- ------- ----- ------ -----------
2000 140394 9660348 ACCEPT Querrule 3 all2all
2001 0 0 ACCEPT icmpv6
2002 0 0 ACCEPT ipv6icmp
10000 211797 14621867 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
IPv6 Firewall "LANv6_OUT" [packets forward to intranet]
Active on (eth0,OUT) (eth1,OUT) (eth3,OUT)
rule packets bytes action description
---- ------- ----- ------ -----------
10000 52718168 64887289084 ACCEPT DEFAULT ACTION
--------------------------------------------------------------------------------
Login mit der lokalen ipv6 Adresse geht:
Master@samgateway4Pro:~$ ssh root@fe80::xxxx:xxxx:fed3:943d%eth3
The authenticity of host 'fe80::xxxx:xxxx:fed3:943d%eth3 (fe80::fe80::xxxx:xxxx:fed3:943d%eth3)' can't be established.
ECDSA key fingerprint is 91:xxxxxxxxxxb2:55:55.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'fe80::xxxx:xxxx:fed3:943d%eth3' (ECDSA) to the list of known hosts.
Password:
Linux UCK-G2-Plus 3.18.44-ui-qcom #1 SMP Thu Jan 4 22:10:12 CST 2024 aarch64
Firmware version: v3.2.10
.--.__
______ __ .--( ) )-. __ __ __
| | (._____.__.___)_| | |__ _____ __ __ _| |_
| ---| || _ | | | _ | <| -__| | | |_ _|
|______|__||_____|_____|_____|__|__|_____|___ | |__|
(c) 2023 Ubiquiti Inc. |_____|
Welcome to the CloudKey Plus!
********************************* NOTICE **********************************
* By logging in to, accessing, or using any Ubiquiti product, you are *
* signifying that you have read our Terms of Service (ToS) and End User *
* License Agreement (EULA), understand their terms, and agree to be *
* fully bound to them. The use of CLI (Command Line Interface) can *
* potentially harm Ubiquiti devices and result in lost access to them and *
* their data. By proceeding, you acknowledge that the use of CLI to *
* modify device(s) outside of their normal operational scope, or in any *
* manner inconsistent with the ToS or EULA, will permanently and *
* irrevocably void any applicable warranty. *
***************************************************************************
Last login: Sat Jan 27 11:59:06 2024 from 10.10.1.1
root@UCK-G2-Plus:~# exit
logout
Connection to fe80::xxxx:xxxx:fed3:943d%eth3 closed.
Alles anzeigen
