Hi. I’ve made simple PPPoE setup for Internet from my ISP, just entered user and password.
It gives me static external(white) IP address without dhcp client enabled, but no IP V6. I tried DHCP client for IP V6, it “searching” forever, no mistakes.
ISP suggested to send a master with their router and assured it will work properly, but they can’t help with MikroTik setup.
Did I missed something or it is some unsupported technology on RouterOS?
What is your ISP and what IPv6 documentation do they publish?
I have IPv6 working on PPPoE but with DHCPv6 PD configured.
/ipv6 address
add eui-64=yes from-pool=v6prefix interface=bridge-local
/ipv6 dhcp-client
add add-default-route=yes interface=pppoe-inet pool-name=v6prefix request=prefix
Of course make sure the DHCPv6 traffic is allowed by your firewall. Start the experiment with all reject/drop rules disabled.
ER-Telecom, Russia. They only publish the fact of IP V6 availability.
I’ve tried to get address too, it worked with prefix only. Thank you!
Ok this is normal! You get the link address on the PPPoE using the PPP protocol and it will assign you
some fe80 address usually. You use DHCPv6 PD to get network address blocks for your internal networks.
You can put separate address blocks on different internal networks, e.g. I have a second SSID on WiFi
for guests and it has a separate IPv6 address block.
BTW, is DHCPv6 server implemented in RouterOS so that such kind of PPPoE connection could be implemented on the server side by MikroTik?
Clients now can get addresses from that pool, I can access ipv6.google.com, so there is no need to set dhcp server like for IPv4?
And can I use default firewall rules from IPv4? Accept established and drop not dstnated?
Clients now can get addresses from that pool, I can access ipv6.google.com, so there is no need to set dhcp server like for IPv4?
And can I use default firewall rules from IPv4? Accept established and drop not dstnated?
Your clients can access the DNS via IPv4 and get IPv6 addresses from that.
IPv6 DNS is only required when you want to disable IPv4 completely.
Of course there is no DSTNAT so you need firewall rules only to accept ESTABLISHED/RELATED and for ICMPv6
and drop everything else on both forward and input. On input I also have a rule to accept UDP to port 546 from
source address fe80::/10
(this is for DHCPv6)
Your clients can access the DNS via IPv4 and get IPv6 addresses from that.
IPv6 DNS is only required when you want to disable IPv4 completely.Of course there is no DSTNAT so you need firewall rules only to accept ESTABLISHED/RELATED and for ICMPv6
and drop everything else on both forward and input. On input I also have a rule to accept UDP to port 546 from
source address fe80::/10
(this is for DHCPv6)
Thanks for detailed answers!