IPV6 from RIPE via 6to4 to secondary router

RouterOS General
1

Ive got a router with AS origin and an /29 announced ipv6 block, i would like to use 6to4 to send some subnets to another router via 6to4. Ive been reading lots of guides, but mostly they deal with ranges from he.net (tunnelbroker) to a router.

Router1 info:
RouterOS CHR
example public ipv4 ip: 10.16.19.87
example ipv4 range from ripe: 192.168.48.0/22
example ipv6 range from ripe: 2a1a:b0a0::/29

Router2 info:
RB3011 UiAS
example public ipv4 ip: 10.110.19.13
public ip from isp is on vlan10,
lan is on vlan20 (10.5.20.0/24)
servers on vlan50 (public ip range transferred via GRE and controlled by mangle rules)

I would then like to pass i.ex. 2a1a:b0a0:b0b::/48 over to router2 from router1 and setup on seperate dhcp v6 servers for seperate vlans with i.ex. a /112 on each so i can control who gets which ip and start setting reverses for the local servers / computers / mobile devices etc.

Anyone got a hint of a guide explaining this, or would like to point me in the right direction ?

Thanks in advance for any reply :slight_smile:

2

You want the same what tunnel brokers do, 6to4 is just a tunnel, similar to e.g. IPIP. Create it between two IPv4 endpoints, add some connecting IPv6 subnet inside, set routes and that’s almost it. The rest (DHCPv6) is the same as if you got /48 routed to remote router using any other way.

3

It is that part on the configuration im not getting, the 6to4 from router to router and setup of first ip(s)

4

Add tunnel interface on Router1:

/interface 6to4
add local-address=10.16.19.87 name=6to4-tunnel1 remote-address=10.110.19.13

And the same (just with swapped local and remote addresses) on Router2 and you got yourself a tunnel. You can ping link-local address on the other end right away (check the other router for ):

/ping fe80::<something> interface=6to4-tunnel1

Then you can either add some connecting subnet to tunnel, or you can use link-local addresses as gateways, or even just tunnel as gateway:

/ipv6 route
add dst-address=2a1a:b0a0:b0b::/48 gateway=6to4-tunnel1

And on Router2 default gateway and unreachable route for prefix, to prevent packets to unused parts from bouncing between routers:

/ipv6 route
add dst-address=::/0 gateway=6to4-tunnel1
add dst-address=2a1a:b0a0:b0b::/48 type=unreachable

Then if you want to use DHCPv6, add 2a1a:b0a0:b0b::/48 in pool and go from there. But remember that DHCPv6 server in RouterOS is so far able to provide only prefixes, not addresses to individual clients.

5

Thanks Sob, will try this in short time and “report” back :slight_smile:

6

Works like a charm, obviously i over-complicated the whole ting :slight_smile: