Hello, thanks in advance for anyone that is reading this. I am trying to setup a basic pppoe dualstack client, but whether or not ipv6 works is up to my luck I guess.
Sometimes it is stuck at “searching…”, other times at “requesting”. And if I’m lucky enough, it works and says “bound”, but it only lasts for about 10 minutes or so, and becomes stuck at “rebinding”. It’s not an ISP problem, any other normal cheap router works for days or weeks without any problems.
Here’s my config:
/interface bridge
add admin-mac=18:FD:74:81:EF:8F auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=eth2-cabo-quarto
set [ find default-name=ether5 ] name=eth5-telefone
set [ find default-name=ether1 ] mac-address=00:EB:D8:24:AC:1D
set [ find default-name=ether3 ] name=ether3-mr30g
/interface vlan
add interface=eth2-cabo-quarto name=vlan10_dhcp vlan-id=10
add interface=eth2-cabo-quarto name=vlan11_macaco vlan-id=11
/interface pppoe-client
add add-default-route=yes default-route-distance=3 disabled=no interface=ether1 name=G2G user=g2g29008
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=pool1 ranges=192.168.87.10-192.168.87.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
add address-pool=pool1 disabled=yes interface=vlan10_dhcp name=dhcp1
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether3-mr30g
add bridge=bridge interface=eth5-telefone
add bridge=bridge interface=vlan10_dhcp
/ip neighbor discovery-settings
set discover-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.87.1/24 disabled=yes interface=vlan10_dhcp network=192.168.87.0
add address=192.168.10.101 interface=vlan11_macaco network=192.168.10.254
/ip dhcp-server lease
add address=192.168.88.99 client-id=1:0:eb:d8:24:ac:1c comment="MR30G SALA" mac-address=00:EB:D8:24:AC:1C server=defconf
add address=192.168.88.93 client-id=1:c0:74:ad:df:44:32 comment=TELEFONE mac-address=C0:74:AD:DF:44:32 server=defconf
add address=192.168.88.91 comment="C6 OPENWRT" mac-address=E4:C3:2A:9E:56:43 server=defconf
/ip dhcp-server network
add address=192.168.87.0/24 dns-server=1.1.1.1,1.0.0.1 gateway=192.168.87.1
add address=192.168.88.0/24 comment=defconf dns-server=1.1.1.1,1.0.0.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1,2001:4860:4860::8888,2001:4860:4860::8844
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=fasttrack-connection chain=forward hw-offload=yes out-interface=G2G
add action=fasttrack-connection chain=output hw-offload=yes out-interface=G2G
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface=G2G
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface=vlan11_macaco
/ip route
add disabled=no distance=4 dst-address=0.0.0.0/0 gateway=192.168.10.254 pref-src="" routing-table=main scope=30 \
suppress-hw-offload=no target-scope=10 vrf-interface=vlan11_macaco
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=G2G type=external
add disabled=yes interface=vlan11_macaco type=external
add interface=bridge type=internal
add interface=vlan10_dhcp type=internal
/ipv6 address
# address pool error: pool not found: g2gv6 (4)
add from-pool=g2gv6 interface=vlan10_dhcp
/ipv6 dhcp-client
add add-default-route=yes interface=G2G pool-name=g2gv6 pool-prefix-length=56 request=prefix use-interface-duid=yes
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=forward
add action=accept chain=input
add action=accept chain=output
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked disabled=yes
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMPv6" disabled=yes protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" disabled=yes port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." disabled=yes dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" disabled=yes dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" disabled=yes protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" disabled=yes protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" disabled=yes ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" disabled=yes in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid disabled=yes
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" disabled=yes src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" disabled=yes dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" disabled=yes hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" disabled=yes protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" disabled=yes protocol=139
add action=accept chain=forward comment="defconf: accept IKE" disabled=yes dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" disabled=yes protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" disabled=yes protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" disabled=yes ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" disabled=yes in-interface-list=!LAN
/ipv6 nd
set [ find default=yes ] disabled=yes interface=G2G managed-address-configuration=yes other-configuration=yes
add disabled=yes interface=vlan11_macaco managed-address-configuration=yes
/system clock
set time-zone-name=America/Sao_Paulo
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LAN
I’ve already reset the router to apply the default ipv6 firewall settings, but that didn’t change the scenario, here are some screenshosts that were taken 5 or 10 minutes apart from each other without changing the config:
Three yellow signs:
Your browser has a real working ipv6. But it is avoiding it.
Your browser is blocking the test urls. We’ll try alternative methods that may not show your IP address, but affecting the quality of the recommendations
Your browser blocked (url)
My IPv4 is cgnat, the ipv6 prefix will change every time I reboot my router or disconnect the internet.
As I stated before, my ISP isn’t a problem, since it does work with any cheap router