Thanks. You were right. the ethernet driver works with io-pkt-v6-hc as well

e.g.
323594 io-pkt-v6-hc -d mpc85xx pci=0,phy_addr=1,mac=008074001736 -d mpc85xx pci=2,phy_addr=17,mac=008074001737

I did some ifconfig and below the current configurations:

# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33192
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
tsec0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        capabilities rx=7<IP4CSUM,TCP4CSUM,UDP4CSUM>
        capabilities tx=0
        enabled=0
        address: 00:80:74:00:17:36
        media: Ethernet autoselect (100baseTX full-duplex)
        status: active
        inet 10.5.255.254 netmask 0xff000000 broadcast 10.255.255.255
        inet6 fe80::280:74ff:fe00:1736%tsec0 prefixlen 64 scopeid 0x2

From a windows box on the same network as tsec0, I can "ping  -6 " tsec0's ipv6 address with no problem.
e.g.

########## window 7 box #########
C:\>ipconfig

Windows IP Configuration

Ethernet adapter primary:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::44b:3298:d5a:20d6%12
   IPv4 Address. . . . . . . . . . . : 10.4.0.6
   Subnet Mask . . . . . . . . . . . : 255.254.0.0
   Default Gateway . . . . . . . . . :

Tunnel adapter isatap.{F3F0BBA8-7676-4D16-859F-B82561836552}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :


C:\>ping -6  fe80::280:74ff:fe00:1736

Pinging fe80::280:74ff:fe00:1736 with 32 bytes of data:
Reply from fe80::280:74ff:fe00:1736: time=1ms
Reply from fe80::280:74ff:fe00:1736: time=1ms
Reply from fe80::280:74ff:fe00:1736: time=1ms
Reply from fe80::280:74ff:fe00:1736: time=1ms

Ping statistics for fe80::280:74ff:fe00:1736:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 1ms, Average = 1ms

############################################

Then I download the utility "ping6" (dated on 7/9/2010). However it does not work even
I ping6 any local ipv6 address of this QNX box, alway complaining of syntax error

e.g.

# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33192
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
tsec0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        capabilities rx=7<IP4CSUM,TCP4CSUM,UDP4CSUM>
        capabilities tx=0
        enabled=0
        address: 00:80:74:00:17:36
        media: Ethernet autoselect (100baseTX full-duplex)
        status: active
        inet 10.5.255.254 netmask 0xff000000 broadcast 10.255.255.255
        inet6 fe80::280:74ff:fe00:1736%tsec0 prefixlen 64 scopeid 0x2


# ping6 ::1
ping6[1]: syntax error: `$V^D^H4$RÖ^A4' unexpected
# ping6 fe80::1
ping6[1]: syntax error: `$V^D^H4$RÖ^A4' unexpected
# ping6 fe80::280:74ff:fe00:1736
ping6[1]: syntax error: `$V^D^H4$RÖ^A4' unexpected

# use ping6
ping6 -- Send ICMPv6 ECHO_REQUEST packets to network hosts

ping6 [-dfHnNqRvw] [-a addrtype] [-b bufsize] [-c count] [-h hoplimit]
   [-I interface] [-i wait] [-l preload] [-p pattern] [-P policy]
   [-S sourceaddr] [-s packetsize] [hops...] host

Options:

 -a addrtype   Generate ICMPv6 Node Information Node Address query. The
               'addrtype' string is constructed from the following characters:

                a  - requests all of responder's unicast addresses
                c  - requests responder's IPv4 addresses
                g  - requests responder's global-scope addresses
                s  - requests responder's site-local addresses
                l  - requests responder's link-local addresses
                A  - requests responder's anycast addresses
 -b bufsiz     Set socket buffer...