ipv6 BGP session

RouterOS General
1

Hello,
We have a ipv4 BGP session running with our transit provider. I now am trying to establish a ipv6 BGP session.
We are using a CCR1009-7G-1C-1S+ running ROS 6.42.1
Our transit provider is connected on port combo1 with address ****:1b08:2::5/127
The IP address to at the procider site is ****:1b08:2::4

From the Mikrotik router I can ping the gateway (****:1b08:2::4) without problems.
The BGP session is established and routes are imported, but all routes show as unreachable.

Below are the configuration steps I have taken
Am I forgetting something?

\

Loopback interface
/interface bridge
add name=loopback

IPv6 addresses
/ipv6 address
add address=:1b08:2::5/127 advertise=no interface=combo1
add address=:6c80::/29 advertise=no interface=loopback

BGP instance
/routing bgp instance
add as=**** client-to-client-reflection=no name=BGP_IPv6

Peer config
/routing bgp peer
add address-families=ipv6 in-filter=IN_Filter_v6
instance=BGP_IPv6 name=peer_BGP_IPv6 out-filter=OUT_Filter_v6
remote-address=:1b08:2::4 remote-as= ttl=default use-bfd=yes

Prefix announcement
/routing bgp network
add network=****:6c80::/29 synchronize=no

Routing filter
/routing filter
add action=accept address-family=ipv6 chain=OUT_Filter_v6 prefix=****:6c80::/29
add action=discard chain=OUT_Filter_v6
add action=accept address-family=ipv6 chain=IN_Filter_v6

2

I’ll check my notes later but 6.42.1 has known, big security issues, please update!

Also check that it hasn’t already been compromised.

3

Sorry - I marked this thread as solve by accident.
I am reposting it. I also added a screenshot of the route list. AI am wondering ig the unreachable routes are a result of a misconfiguration on my part, or if I need to contact my transit provider.

We have a ipv4 BGP session running with our transit provider. I now am trying to establish a ipv6 BGP session.
We are using a CCR1009-7G-1C-1S+ running ROS 6.42.1
Our transit provider is connected on port combo1 with address ****:1b08:2::5/127
The IP address to at the procider site is ****:1b08:2::4

From the Mikrotik router I can ping the gateway (****:1b08:2::4) without problems.
The BGP session is established and routes are imported, but all routes show as unreachable.

Below are the configuration steps I have taken
Am I forgetting something?
routes1.jpg
routes1.jpg480×459 81.4 KB

Loopback interface
/interface bridge
add name=loopback

IPv6 addresses
/ipv6 address
add address=:1b08:2::5/127 advertise=no interface=combo1
add address=:6c80::/29 advertise=no interface=loopback

BGP instance
/routing bgp instance
add as=**** client-to-client-reflection=no name=BGP_IPv6

Peer config
/routing bgp peer
add address-families=ipv6 in-filter=IN_Filter_v6
instance=BGP_IPv6 name=peer_BGP_IPv6 out-filter=OUT_Filter_v6
remote-address=:1b08:2::4 remote-as= ttl=default use-bfd=yes

Prefix announcement
/routing bgp network
add network=****:6c80::/29 synchronize=no

Routing filter
/routing filter
add action=accept address-family=ipv6 chain=OUT_Filter_v6 prefix=****:6c80::/29
add action=discard chain=OUT_Filter_v6
add action=accept address-family=ipv6 chain=IN_Filter_v6

4

I hope you updated RouterOS.. Your version really isn’t safe to use..

But I checked my notes, I didn’t use IPv6 in v6 as I found bugs that made it not work for me (features that were supposed to be available and worked for IPv4 that simply had no effect for IPv6).

I suspect your firewall is blocking the traffic.