Dual Stack IPv6 Configuration

RouterOS Beginner Basics
1

Hi Folks,

I’m needing some help configuring my Mikrotik to run a Dual Stack network with IPv4 and IPv6. My ISP has no free IPv4 addressed and just put everyone on CG-NAT since i use some remote tools to access my computer i need routable network. Besides running a VPN to an off country VPS i have the option to use the provided IPv6 but i cant get my head around it.

I did an extensive reading about IPv6 and understand the basics of it. First my ISP provides me with a /64 IP prefix. I had configured the modem/router from the ISP to create a DHCPv6 server, then on the mikrotik i configured a DHCPv6 client on my Mikrotik and got the prefix and IP address to my Mikrotik. Then added a pool named “internet” to that prefix.

Now my problem is to relay this prefix to my local network. I did create another DHCPv6 server on my mikrotik using the “internet” pool but the clients just get link local addresses (fe80) not public ones.

2

I’ve added an IP address to the local network then I was able to replicate SLAAC configuration from my ISP. Now my local machines have IPv6 addresses but everything is unreachable.

I’ve already added a firewall rule to allow all input,output and forward to and from ::/0 as a deseperated attemp and nothing. I’m almost removing the mikrotik and just using my ISP router… Waste of equipment.

3

Here is a sample config that may be helpful for a subscriber router from an article I did on IPv6 for ISPs

It sounds like you are almost there. Make sure you have assigned a subnet from the IPv6 prefix that’s delegated to the router. It needs to be on the interface/bridge that yourwired/wireless network is on


/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-LAN
/interface vlan
add interface=ether1-WAN name=vlan1101-AP1-Data vlan-id=1101
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-client
add disabled=no interface=ether1-WAN
/ipv6 address
add eui-64=yes from-pool=home interface=ether2-LAN
/ipv6 dhcp-client
add add-default-route=yes interface=vlan1101-AP1-Data pool-name=home \
    pool-prefix-length=56 request=prefix
/ipv6 nd
add hop-limit=64 interface=ether2-LAN
/system identity
set name=Subscriber-1
/tool romon
set enabled=yes

For context, the full article is here.

https://stubarea51.net/2018/09/14/wisp-design-an-overview-of-adding-ipv6-to-your-wisp/

4

You wrote your ISP gave you a /64 prefix … what is RB’s WAN IPv6 address, is it from the assigned /64 prefix?

You can’t use addresses from the same /64 prefix both on WAN and LAN side of router.
That’s why normal ISPs hand-out larger prefixes (at least /60, mine gave me /56 even though they use PPPoE and WAN side uses link-local address) so client can easily configure their router …
Using smaller prefixes for subnets (e.g, /72) might be possible, but I’m not sure it’s widely supported ..

5

Smallest prefix for SLAAC is /64, so smaller ones are not the way to go.