IP6 6-to-4 tunnels (Hurricane Electric) with Mikrotik

Good morning all —

I’m making the transition from a Linux router to a Mikrotik box. I have the 450G right now while I wait for the 1100. I’m try to do several things… Some are probably easy, but these are a few that have me stumped…

  1. I’ve set up an OpenVPN server. I see where I put in my certificate, but where do the clients include theirs. On Linux, I include their certs in /etc/openvpn. In profiles, I can create login/passwords for the user base, but not certs.

  2. When I load my certs, they always come in Winbox as cert1 and cert2. (I had done a /certificate import file=…)

  3. And now the big one. I had successfully used Hurricane Electric for some time on 6to4 tunnels. I followed the Wiki instructions and created a sit interface. I then added the 2000::/3 route. No matter what I do, I can ping the local end of the sit, but not the far end. I’ve set up firewall log rules in ipv6 and ipv4. I can see that packets go out (ip type 41) on IPv4 and return, but on IPv6 they just go out – no returns. What gives?

I’ve attached my (reduced) configrs
backup-text.rsc (2.67 KB)