diff --git a/hosts/xlab-gateway/networking.nix b/hosts/xlab-gateway/networking.nix
index cbbf440..435c630 100644
--- a/hosts/xlab-gateway/networking.nix
+++ b/hosts/xlab-gateway/networking.nix
@@ -290,6 +290,8 @@
       routes = [
         { Destination = "0.0.0.0/0"; Scope = "link"; Table = 1002; }
         { Destination = "::/0"; Scope = "link"; Table = 1002; }
+        # Internal ULA via tunnel (main table) so gateway + LAN can reach 10.0.0.1's IPv6
+        { Destination = "fd99:23eb:1682::/48"; Scope = "link"; }
       ];
     };