Hi,
I have a /112 from cogent, because its a /112 Microtik doesn’t create a link local.
I need the link local so the incoming BGP routes are routable.
My other ipv6 BGP feed I was given is a /64 and works fine as the link local was created automatically.
How do I add a link local when I only have a /112 on the interface.
I took the MAC from the bridge and pasted in here which created:
http://www.sput.nl/cgi-bin/cgi-llmac
fe80::d6ca:6dff:fe77:dda6
I tried to add fe80::d6ca:6dff:fe77:dda6 to the interface, it said:
Couldn’t add New Ipv6 Address - can not add link local address (6)
I tried both add fe80::d6ca:6dff:fe77:dda6 and add fe80::d6ca:6dff:fe77:dda6/64
Please can someone point me in the right direction.
Cheers
Tony
Is the /112 statically assigned or DHCPv6 ?
Hi
Comes from Cogent as a BGP link it’s static /112 ipv6
Thanks
Tony
Your /112 is a public address, right? Why do you not just add it to the interface? any problems with that?
Link local addresses are not added manual. That’s the reason for “Couldn’t add New Ipv6 Address - can not add link local address (6)” Your interface should already have one, generated automatically by the system.
hi
The /112 is on the interface connected to cogent. There is no link local on that interface I think for that to be created automatically on a Microtik it is has to be a /64
The other provider gave us a /64 and that has dynamically created a link local on the other interface where the /64 exists.
So my inbound BGP routes work on one provider that gave us a /64 but on Cogent the inbound BGP routes show as unreachable as it tries to route to Cogents link local.
2 Db dst-address=2001:200::/32 gateway=fe80::6600:f1ff:feef:5c0%ipv6-cogent
gateway-status=fe80::6600:f1ff:feef:5c0%ipv6-cogent unreachable
distance=20 scope=40 target-scope=30 bgp-as-path="174,2914,2500"
bgp-med=9031 bgp-atomic-aggregate=yes bgp-origin=igp
bgp-communities=174:21100,174:22008 received-from=cogentIPv6
Thanks
Tony
Hi,
Can some one from Microtik Support point me in the right direction on this?
Thanks
Tony
So I added a test /112 to a lab RB951 and there was no issue adding it to the existing /64 that was built dynamically.
Could you post your config or supout.rif?
Hi
2 ipv6 BGP peers 1 on each interface,
/interface print
0 RS ether1 ether 1500 1590 10226 D4:CA:6D:77:DD:AA
12 RS sfp1-Cogent ether 1500 1590 10226 D4:CA:6D:77:DD:A6
/interface bridge> print
0 R name="ipv6-cogent" mtu=1500 l2mtu=1590 arp=enabled mac-address=D4:CA:6D:77:DD:A6 protocol-mode=rstp priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m
1 R name="ipv6-jp" mtu=1500 l2mtu=1590 arp=enabled mac-address=D4:CA:6D:77:DD:AA protocol-mode=rstp priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m
/ipv6 address print
add address=2001:978:2:21::59:2/112 advertise=no interface=ipv6-cogent ---- /112 ip from peer
add address=2a02:4f60::1:0:0:0:0 advertise=no interface=ipv6-cogent ---- this is a /64 from my block to see if I could get a link local on the interface
add address=2a02:4f60::/32 advertise=no interface=ether1 --- my /32 block
add address=2001:ba8::1b1:0:0:0:3 advertise=no interface=ipv6-jp --- /64 from peer
/export
0 G address=2001:978:2:21::59:2/112 from-pool="" interface=ipv6-cogent actual-interface=ipv6-cogent eui-64=no advertise=no
1 G address=2a02:4f60::1:0:0:0:0/64 from-pool="" interface=ipv6-cogent actual-interface=ipv6-cogent eui-64=no advertise=no
2 G address=2a02:4f60::/32 from-pool="" interface=ether1 actual-interface=ipv6-jp eui-64=no advertise=no
3 G address=2001:ba8::1b1:0:0:0:3/64 from-pool="" interface=ipv6-jp actual-interface=ipv6-jp eui-64=no advertise=no
4 DL address=fe80::d6ca:6dff:fe77:ddaa/64 from-pool="" interface=ipv6-jp actual-interface=ipv6-jp eui-64=no advertise=no
all Cogents routes as unreachable:-
4 Db dst-address=2001:200:c00::/40 gateway=fe80::6600:f1ff:feef:5c0%ipv6-cogent
gateway-status=fe80::6600:f1ff:feef:5c0%ipv6-cogent unreachable distance=20 scope=40
target-scope=30 bgp-as-path="174,1239,4725,9607,7530,7530" bgp-med=81051 bgp-origin=igp
bgp-communities=174:21000,174:22013 received-from=cogentIPv6
5 Db dst-address=2001:200:c000::/35 gateway=fe80::6600:f1ff:feef:5c0%ipv6-cogent
gateway-status=fe80::6600:f1ff:feef:5c0%ipv6-cogent unreachable distance=20 scope=40
target-scope=30 bgp-as-path="174,1280,2500,23634" bgp-med=141061 bgp-origin=igp
bgp-communities=174:21001,174:22013 received-from=cogentIPv6
6 Db dst-address=2001:200:e000::/35 gateway=fe80::6600:f1ff:feef:5c0%ipv6-cogent
gateway-status=fe80::6600:f1ff:feef:5c0%ipv6-cogent unreachable distance=20 scope=40
target-scope=30 bgp-as-path="174,1239,4725,2907,7660" bgp-med=81051 bgp-origin=igp
bgp-communities=174:21000,174:22013 received-from=cogentIPv6
7 Db dst-address=2001:208::/32 gateway=fe80::6600:f1ff:feef:5c0%ipv6-cogent
gateway-status=fe80::6600:f1ff:feef:5c0%ipv6-cogent unreachable distance=20 scope=40
target-scope=30 bgp-as-path="174,4637,7610,7472" bgp-med=1 bgp-origin=igp
bgp-communities=174:21100,174:22012 received-from=cogentIPv6
My guess no local link on that interface.
Thanks
Tony
It looks like your other bridge interface generated a dynamic link local. I would try taking it out of the bridge and verify connectivity with the the IP directly on the interface. Once that is done you can move forward with testing the bridge
Sorry duplicate as one below
Hi, thank you
That worked .. but not sure its right …
Now the bridge is saying designated bridge where as the other says root bridge and the link local is the same as the link local on the other bridge, is that right ?
All I did was take the peer down, disable the peer and instance, give a router id to the BGP instance where as I left it blank last time
Removed the bridge, added it back. The IP was assigned to the main port ipv6-cogent, re-assigned it to the bridge
I got a link local and BGP now sees the route as reachable. Now I will do the other router.
# ADDRESS FROM-POOL INTERFACE ADVERTISE
0 G 2001:978:2:21::59:2/112 ipv6-cogent no
1 G 2a02:4f60::/32 ether1 no
2 G 2001:ba8::1b1:0:0:0:3/64 ipv6-jp no
3 DL fe80::d6ca:6dff:fe77:ddaa/64 ipv6-jp no
4 DL fe80::d6ca:6dff:fe77:dda6/64 ipv6-cogent no
Is that correct would the link local be the same on 2 different bridges?
Thanks
Tony
Look more closely.. it is not the same 
The link-local address usually contains the mac-address of the interface. That’s why they only differ slightly.
Hi,
That will teach me to leave my glasses down stairs, your correct, I have just done the other router and that is fine also with 2 different link locals and ipv6 BGP all good
Thanks
regards
Tony
Glad everything is working for you now!