An IPv6-only client can load a login page yet fail on downloads when larger packets or a second hostname use an IPv6 path that is incomplete.
A ZimaSpace NAS login page may be small and served from one hostname, while a file download uses a different host, CDN-style route, reverse-proxy stream, or larger TCP segments. That makes two failure classes especially important: IPv6 Path MTU Discovery and missing IPv6 reachability for the actual download endpoint.
Test for a Path-MTU Black Hole
Compare small HTTPS responses with a controlled large transfer and packet-size probes.
A focused network engineering deep dive on Path MTU discovery can fail in practice helps isolate this branch because it addresses the same micro-problem instead of only defining the underlying protocol.
If the connection establishes but stalls when larger packets begin, inspect MTU and ICMPv6 before blaming the NAS application.
Keep ICMPv6 Packet Too Big Working
IPv6 relies on the sender learning the path limit rather than intermediate routers fragmenting oversized packets.
A focused specialist ipv6 explainer on ICMPv6 Packet Too Big is essential helps isolate this branch because it addresses the same micro-problem instead of only defining the underlying protocol.
Remove firewall rules that indiscriminately block required ICMPv6 control messages, then repeat the download.
Look for an MTU Cliff Between Segments
A VPN, PPPoE link, VLAN path, or tunnel can reduce usable MTU even when the LAN-facing NAS interface is larger.
A focused real-world ipv6 field note on an MTU cliff can break larger traffic helps isolate this branch because it addresses the same micro-problem instead of only defining the underlying protocol.
Compare path size from client to proxy and from proxy to NAS. Align the smallest path rather than raising the NAS MTU alone.
Diagnose IPv6 PMTUD Directly
Use IPv6-aware trace and packet-size tests on the exact hostname used by downloads.
A focused focused ipv6 troubleshooting guide on IPv6 MTU problems can cause partial connectivity helps isolate this branch because it addresses the same micro-problem instead of only defining the underlying protocol.
Record the largest successful packet and where the path changes. The login page is not a sufficient connectivity test.
Check Whether the Download Uses Another Hostname
Inspect browser network requests to see whether the file is served from a hostname different from the login page.
A focused ipv6-first dns analysis on AAAA coverage can differ between required hostnames helps isolate this branch because it addresses the same micro-problem instead of only defining the underlying protocol.
Query every required hostname from the IPv6-only client. One missing AAAA record can leave the login path healthy while the download path is unreachable.
Check NAT64 or DNS64 for IPv4-Only Backends
If one backend remains IPv4-only, confirm the IPv6-only client has a working translation path.
A focused home-network ipv6 deep dive on NAT64 and DNS64 bridge IPv6-only clients helps isolate this branch because it addresses the same micro-problem instead of only defining the underlying protocol.
Do not disable IPv6 as the permanent fix. Make the required backend dual-stack or provide a deliberate translation path.
Re-Test the Exact Home-Server Path
After changing one variable, repeat the same NAS or self-hosted workflow from the same client instead of switching to a different test that may use another path.
The related ZimaSpace guide on the adjacent home-server network path helps keep the final verification tied to the same self-hosted environment.
The fix is complete only when the original symptom stays resolved after reconnect, service restart, and a second controlled transfer or request.
Frequently Asked Questions
Why can a login page work if IPv6 is broken?
The login page may be small, cached, or served from a different hostname and path than the file payload.
Does an AAAA record prove the service works over IPv6?
No. It proves DNS publishes an IPv6 address, not that routing, MTU, firewall, proxy, and backend behavior are correct.
Should I disable IPv6 to fix the download?
No. Use IPv4 only as a comparison test; fix the broken IPv6 or translation path instead.
Support & Tips
More to Read

Can Plex Share a GPU With Another Docker Container?
Plex and another container can often access the same GPU, but you must test driver support, device mapping, video-engine load, memory, and recovery behavior.

How to Tell Whether a Plex Error Comes From the Client or Server
Reproduce the same item on another client, compare the session path, then collect server evidence only after scope tells you where the failure actually...

How to Configure Plex Cache and Transcode Temporary Storage
Protect persistent Plex state while placing transcode temp files on suitable local storage, then verify cleanup, free space, and restart behavior.

