Hello,
I have some problem setup ipv6 on my Mikrotik
What I have from HE:
Server IPv4 Address:64.62.134.130
Server IPv6 Address:2001:470:66:c15::1/64
Client IPv4 Address:198.27.150.230
Client IPv6 Address:2001:470:66:c15::2/64
Routed IPv6 Prefixes
Routed /64:2001:470:67:c15::/64
Routed /48:2001:470:4ba7::/48
/interface 6to4 add comment="Hurricane Electric IPv6 Tunnel Broker" disabled=no local-address=198.27.150.230 mtu=1280 name=sit1 remote-address=64.62.134.130
/ipv6 route add comment="" disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:66:c15::1 scope=30 target-scope=10
/ipv6 address add address=2001:470:66:c15::2/64 advertise=no disabled=no eui-64=no interface=sit1
so I able to ping my Mikrotik from outside:
$ ping6 2001:470:66:c15::2
PING 2001:470:66:c15::2(2001:470:66:c15::2) 56 data bytes
64 bytes from 2001:470:66:c15::2: icmp_seq=1 ttl=58 time=8.61 ms
64 bytes from 2001:470:66:c15::2: icmp_seq=2 ttl=58 time=9.10 ms
^C
--- 2001:470:66:c15::2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 8.612/8.857/9.102/0.245 ms
Now I need setup Ipv6 on my lan:
I have few VLAN. so my setup looks like:
>
/ipv6 export
# mar/12/2020 22:40:06 by RouterOS 6.46.4
# software id = N28H-BXPP
#
# model = RouterBOARD 750G r2
# serial number = 64FC059EB6A6
/ipv6 dhcp-server
add address-pool=IPv6-pool-20 interface=bridge-v-20 name=IPv6-DHCP-20
add address-pool=IPv6-pool-25 interface=bridge-v-25 name=IPv6-DHCP-25
/ipv6 pool
add name=IPv6-pool-20 prefix=2001:470:4ba7:20::/64 prefix-length=64
add name=IPv6-pool-25 prefix=2001:470:4ba7:25::/64 prefix-length=64
/ipv6 address
add address=2001:470:66:c15::2 advertise=no interface=sit1
add address=2001:470:4ba7:20::1 interface=bridge-v-20
add address=2001:470:4ba7:25::1 interface=bridge-v-25
/ipv6 firewall address-list
add address=fe80::/16 list=allowed
add address=2001:470:67:c15::/64 list=allowed
add address=ff02::/16 comment=multicast list=allowed
add address=2001:470:67:c15:14c0:4961:5ccd:f80d/128 list=allowed-ssh
add address=2001:470:4ba7::/48 list=allowed
/ipv6 firewall filter
add action=accept chain=input comment="Allow established connections" connection-state=established
add action=accept chain=input comment="Allow related connections" connection-state=related
add action=accept chain=input comment="Allow limited ICMP" limit=50/5s,5 protocol=icmpv6
add action=accept chain=forward comment="Allow UDP" protocol=udp
add action=accept chain=input comment="Allow ssh to this host" dst-address-list=allowed-ssh dst-port=22 protocol=tcp
add action=drop chain=input in-interface=sit1 log=yes log-prefix=dropLL_from_public src-address=fe80::/16
add action=drop chain=input
add action=accept chain=forward comment="Allow any to internet" out-interface=sit1
add action=accept chain=forward comment="Allow established connections" connection-state=established
add action=accept chain=forward comment="allow ssh to this hosts" dst-address-list=allowed-ssh dst-port=22 protocol=tcp
add action=accept chain=forward comment="Allow related connections" connection-state=related
add action=drop chain=forward
/ipv6 nd
set [ find default=yes ] advertise-dns=no interface=bridge1
add advertise-dns=no ra-lifetime=none
/ipv6 route
add distance=1 dst-address=2000::/3 gateway=2001:470:66:c15::1
Hosts from my LAN are receiving IP from proper IPv6 subnet, but router is looks like not correct.
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether a0:99:9b:06:8f:45
inet6 fe80::cea:8bb0:5cd6:b4ee%en0 prefixlen 64 secured scopeid 0x4
inet6 2001:470:4ba7:20:1007:3fb8:5178:41fe prefixlen 64 autoconf secured
inet6 2001:470:4ba7:20:d103:2f3c:5880:7dc prefixlen 64 autoconf temporary
inet 10.10.20.119 netmask 0xfffffc00 broadcast 10.10.23.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
and router fe80::e68d:8cff:fee8:f62e – internal default address on microbic interface
[apl@router.petrenko.me] > /ipv6 address print
Flags: X - disabled, I - invalid, D - dynamic, G - global, L - link-local
# ADDRESS FROM-POOL INTERFACE ADVERTISE
0 DL fe80::3:c61b:a0eb/64 sit1 no
1 DL fe80::e68d:8cff:fee8:f62e/64 bridge1 no
2 DL fe80::e68d:8cff:fee8:f62e/64 vlan1 no
3 DL fe80::e68d:8cff:fee8:f62d/64 [0] WAN Uplink no
4 DL fe80::e68d:8cff:fee8:f62e/64 bridge-v-20 no
5 DL fe80::e68d:8cff:fee8:f62e/64 bridge-v-25 no
6 G 2001:470:66:c15::2/64 sit1 no
7 G 2001:470:4ba7:20::1/64 bridge-v-20 yes
8 G 2001:470:4ba7:25::1/64 bridge-v-25 yes
on any LAN client any access by ipV6 I have
$ ping6 www.google.com
ping6: UDP connect: No route to host
Please help me fix this error.