IPv6 link local address for bridge interface seems to be somehow broken. It was also on 6.0. Somehow it worked for the first reboot after upgrade, but the second reboot broke it. The link local address now gets assigned to (unknown) interface. # ADDRESS FROM-... INTERFACE ADV 3 DL fe80::d6ca:6dff:f...

IPv6 link local address for bridge interface seems to be somehow broken. It was also on 6.0. Somehow it worked for the first reboot after upgrade, but the second reboot broke it. The link local address now gets assigned to (unknown) interface. # ADDRESS FROM-... INTERFACE ADV 3 DL fe80::d6ca:6dff:fe...

Is there a way to block packets containing routing header type 0 in RouterOS?

Like the way ip6tables does:
# Filter all packets that have RH0 headers:
$IP6TABLES -A INPUT -m rt --rt-type 0 -j DROP
$IP6TABLES -A FORWARD -m rt --rt-type 0 -j DROP
$IP6TABLES -A OUTPUT -m rt --rt-type 0 -j DROP

Today it occurred to me, that I could get this working with routing both IPv6 and IPv4 by using proxy NDP.

There is also a automatic proxy NDP daemon, which I could use in MetaRouter:
http://www.priv.nu/projects/ndppd/

Is there a way to configure proxy NDP in RouterOS?

The 5 Gigabit Ports and the SFP ports are connected to an external switch chip, Atheros 83xx?

My RB2011 tells that it has two switches: ar8327 and ar8227. Not sure how those are wired however.

A way to configure which protocols are bridged. Like a BROUTING chain on bridge firewall.

I would like to bridge only IPv6 on one interface and route IPv4.

I think the best way is to use two interfaces towards the internet. One routed with ipv4 and one bridged with ipv6. Or write/debug complex bridge-firewall rules. All the workarounds proposed in this thread require ISP to do routing. My ISP does not wish to do too much work for IPv6 connectivity, so ...

routers do not need to have ipv6 addresses so your solution is to put /64 prefix in your LAN where your local ipv4 addresses reside and on the routers between you just set up ipv6 routes that will point where your /64 prefix is. just ask that your provider sets up route to your /64 prefix via LL ad...

Wouldn't it be more simple to forward IPv6 and NAT IPv4 between 2 router interfaces without bridging?

It would be. But with only one /64 network I can't see how it is possible? The ISP's router thinks all addresses in /64 are local, not routed through my router.

I have a network in which the ISP is giving a /64 IPv6 network and single IPv4 address. The ISP keeps first address in the /64 for their router. So.. I have to transparently do IPv6 firewalling while NATting the IPv6. Is there a way to control which protocols are sent to be routed in the bridge filt...