Hello everybody,
I’m very beginner with Mikrotik and have a RB750 on my residential network using IPV4. LAN 1 have the ISP link with PPPOE connection and the another 4 lan’s are four networks with 4 different DHCP’s.
LAN 1 = ISP with PPPOE
LAN 2 = 192.168.168.0/24
LAN 3 = 192.168.167.0/24
LAN 4 = 192.168.166.0/24
LAN 5 = 192.168.165.0/24
Are you have any guides or manuals showing how to configure the IPV6 on this network?
Thanks for any help.
See ya.
Is your ISP supporting IPv6?
If yes, you could ask for >64 range of ips for internal allocation to all sunets.
If no, you could go for IPv6 over IPv4.
You’ll need to get an IPv6 allocation from your ISP which has at least 4 blocks of addresses in it. The standard subnet in IPv6 is a /64. This means at the very minimum, you should receive at least a /62 but recommended best practice is to avoid subneting except on nibble boundaries - which means that you should get a /60 or a /56. My ISP is Comcast, which assigns /60 to customers. I’ve seen many posts on here where the ISP assigns a /56 (and some even receive a whopping /48 which is just an insane amount of space for a residential end-user)
Note that you do not really need to assign a LAN address to your WAN interface (the PPPoE) in IPv6. It won’t hurt if you do, but if your ISP only gives you 4 /64’s worth of space to play with, you can just use those blocks on the various LAN segments w/o any issue.
Mikrotik’s limited IPv6 feature set means that your assignment options from the ISP are:
a) static
b) dhcpv6-pd
Comcast uses option B. For this, your basic steps are to add a dhcpv6-client to the WAN interface (the pppoe-out interface in your case) and associate an address pool with this client (eg, named ISP). Then each of your LAN interfaces should be assigned an address with from-pool=ISP. Make the address=::1/64 and set from-pool=ISP.
Be SURE to go in and set up at least a basic state-tracking firewall for IPv6 because all of your devices have PUBLIC addresses in IPv6.
Typical basic rules are:
chain =forward:
1: accept connection-state=established,related
2: accept out-interface=wan
chain=input
1: accept connection-state=established,related
2: accept protocol=icmpv6 (note that ‘ARP’ functionality in IPv6 uses ICMP, so you really can’t block it wholesale like many did in IPv4)
3: accept in-interface=!wan
If your ISP makes static assignments, then you don’t need to use the pool - just create a static IPv6 type=unreachable route for your master block, e.g. /ipv6 route add dst=2001:db8:abcd:1200::/56 type=unreachable and then just assign subnets of this to your interfaces as needed e.g. /ipv6 address add address=2001:db8:abcd:1200::1/64 interface=lan1 , /ipv6 address add address=2001:db8:abcd:1201::1/64 interface=lan2 … etc