Hi,

I have an LAB IPv6 LAN segment in which PCs are carrying only IPv6 addresses. I want to be able to access internet (essentially ipv4 for 99.99% of the websites). For which I have done the following setup.


v6 interface v4 interface
[IPv6 LAN]---------------------------[Mikrotik Web proxy]----------------------------------[Mikrotik IPv4 Router]-------->Internet

I have followed the IPv6 wiki and configured the webproxy to listen to IPv6 requests. I have configured the firefox browsers on the PCs. but they are unable to browse.

Any suggestion?

You cannot use the built in proxy to translate between the IPv6 and Pv4 worlds.

Any suggestion how this translation may be achieved? Can any other proxy help?Can you share any write up?

You can't do this with RouterOS at all. It doesn't contain any NAT-PT or NAT64/NAT46 capabilities.

If not routeros then what else can do this?However, I do not want to NAT V6 to V4, what I want to use is a dual stack webproxy that would retreive the webpages using V4 and return them to V6 clients. My router is running BGP on v6 and got an AS and poolof V6 as well.

Apache's httpd can do that. You can also use Google to find other solutions.

To get assistance with that look in their communities as this forum is only for discussion of Mikrotik products.

Thanks for suggesting google. It reminded me that this option exists.

You need use chain "dns64 + nat64".

Your pс ask dns64
dns64 ask aaaa-query
if site have not native aaaa-addres (with ipv6)=> dns64 return special-maked aaaa-answer to your pc, which contain special-maked IPv6 address (prefixForNAT64+ipv4address)
Browser of your pc sent GET request for this "special-maked IPv6", this request go to your nat64
nat64 get ipv4 adress from "special-maked IPv6" и forward request to ipv4 internet from itself, then it return answer to your pc

you can create local IPv4 network, that way your customers will accept DNS A racords instead of only accepting AAAA records. On the router you even can drop ipv4 traffic, as all that has to go through has to be to the router and then from the router.

Just note proxy works only for HTTP, and not for HTTPS