IPv6 Experiment

I made a Virtual AP that serves only IPv6 with no compatability features, and named it Free IPv6 Internet.
There is no v4, and I have blocked all v4 on the interface just in case.
I’ve also blocked everything on the input chain, and isolated it from my LAN with a foward filter on IPv6.
I also put a simple queue on it to keep people from mooching too much of my bandwidth.
I’m just curious to see whether it gets any usage or not.

Right now, I’m just logging wireless events - what else might I do to get a list of who has connected and what they’ve done? I’m going to enable a graphing target as well. Might as well catch a picture of the utilization. :slight_smile:

I’m just curious to see whether it gets anyone actually attached to it - it’s in a neighborhood, so it would either be my neighbors or else a strange van with no windows parked in the road. :slight_smile:

As I don’t know to much about the RouterOS I’m not sure if the following would be an adition.

As IPv6 clients (like androids) do not hava a static DNS and RA also doesnt, maybe enable DHCPv6, setup a DNS server and log the queries? Then you would see what sites and maybe services would be accessed.

With Mikrotik, it’s RA (SLAAC) or its dhcpd-PD
No stateless dhcpv6 for information attributes such as DNS, TFTP server, etc.
(not supported)

My iPhone gets the DNS server from RA just fine, though.

The logging DNS server is a good idea

You will have problem with Windows clients, because they won’t get DNS from RA. Not even the latest and greatest Windows 10. It seems that Microsoft decided to boycot this technology. But they all have fec0:0:0:ffff::1, fec0:0:0:ffff::2 and fec0:0:0:ffff::3 hardcoded as DNS, so you can add one of those to your router, to give them working DNS.

In a way, it’s even better, because at least this way, they will use your router’s DNS cache. Clients getting DNS from RA will bypass it, because RouterOS does not send them its own address, it just passess the address of external IPv6 resolver from /ip dns. I’m wondering if MikroTik has any plans to fix it.

I saw that my iPhone got the Mikrotik’s dns server and not the mikrotik itself AS the server.

Interestingly, my Windows7 laptop worked just fine when I removed IPv4 from the wireless network connection profile. (I played around with that prior to this 6-only ssid) Obviously my mikrotik wasn’t giving dhcpv6 information, yet somehow my laptop had a link-local DNS server. It’s been a week or so, so I’m not sure whether it was my mikrotik or one of those well-known site-local multicast addresses . (maybe Win7 just defaults to using its default gateway as a dns server in lieu of anything else). I’m going to go do a little packet sniffing tonight on the RA packets and double-check what DNS resolver my laptop gets assigned / correctly guesses to use.

If I can get a stable OpenWRT image rigged up with tayga and dns64, I’m going to put that into the mix on my 6-only network just to see how smooth or rocky the end-user experience is for a 6-only box.

Well, I solved the mystery of my Windows7 box using default router link-local address as DNS server…
I had apparently hard-wired it previously, so yes - Windows pretty much requires a dhcpv6 stateless server to hand it dns servers. (RA-learned dns = no go)

Mikrotik - is IPv6 going to be getting any love in ROS version 7?

Oh - and another interesting thing - older winbox seems to be refusing to use my IPv6 right now - I’ve used it before - not sure what the @#$!%* is wrong with it…

图片内容包涵 从创建VPN 以及设置VPN的详细截图,XP的暂时不支持,只支持WIN7以上系统,apple 产品均不支持,相关协议并没完善。手机目前只测试过apple产品包涵手机和IPAD其他产品没经过测试。
服务器地址:wordgao.f3322.org
测试帐号:test
测试密码:test123
IPsec 密钥:88888888 (8个8)
第一次可能连接比较缓慢,系统认证需要时间等待,其次是自动申请IPV6地址也需要一点时间。
如果连接不上的问题,可能是您的IPsec加密服务没有启用,请根据最下面的图片去设置启用,既可正常。
然后自己可以测试打开 http://ip138.com 显示的IP地址为深圳IPV4地址,
http://test-ipv6.com 可检测您的IPV6网络是否正常,或者是ping ipv6.google.com 获取的IP地址为IPV6地址,并非IPV4
测试网络延迟可ping 2003::1 是本机内网临时虚拟网卡地址,ping值大概是42左右。

测试服务器说明,100M光迁,上传5M,即使您是一个人使用最高能获取的最大速率也是5M,95M做为数据沉淀堆栈。
路由器配置很垃圾,顶多10个人同时在线使用,CPU集成的配置比较低。。所以不能大规模使用测试。

测试IPV6网址 http://ipv6.google.com

光一秒钟30万公里,绕地球7.5圈,1秒钟=1000毫秒,则绕地球半圈速度是1000/15=66毫秒,数据返回需要同样的时间.加上双方到海缆之前经过的路由处理时间,中美服务器之间的ping值,最好的期望值,是180ms !


Wordgao,

I have lost after trying to read the third sign…pictures are a little bit easier … :slight_smile: Could you switch to English ?

A post was split to a new topic: IPv6 Experiment - bridge problem