So, for some time now I’ve had a Mikrotik running in place of my ISP provided CPE which works great.
Basic configuration for IPv4 is vlan10 tagged dhcp client on ether1 to get an internet connection (WAN), wireless and ether3 bridged as a LAN interface on which sits a dhcp server with NAT enabled - the basics which works (plus plenty of firewall rules, scripts, ipsec, another vlan10 tagged dhcp interface for the ISP’s CPE for VoIP etc etc that I’ve added over time)
I’ve now been given IPv6 on my connection and I’m trying to learn how to configure this to work. I have a DHCPv6 client on the WAN interface with peer dns+add default route turned on which gets an address from my ISP but not sure what I need to do next … I have tried adding an IPv6 address to the LAN interface but I’m not able to ping out from the Mikrotik’s terminal.
So, it looks like ipv6 is working fine n dandy on the Mikrotik. I get an ipv6 address of xyzz:xyzz:xyzz:x00::/56 so added an ip of xyzz:xyzz:xyzz:x01::/64 to the LAN interface. No idea if that’s the right thing to do, but it works as far as the Mikrotik is concerned (i’m firewalling it off in between attempts to make it work)
My windows PC shows:
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : xyzz:xyzz:x:x:yyyy:zzzz:abcd:8e37
IPv6 Address. . . . . . . . . . . : xyzz:xyzz:xxxx:xxx:yyyy:zzzz:abcd:8e37
Temporary IPv6 Address. . . . . . : xyzz:xyzz:x:x:xxxx:xxxx:xxxx:a8a
Temporary IPv6 Address. . . . . . : xyzz:xyzz:xxxx:x01:axxx:fxxx:bxxx:a8a
Link-local IPv6 Address . . . . . : fe80::xxxx:xxxx:xxxx:8e37%3
IPv4 Address. . . . . . . . . . . : 192.168.1.33
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : fe80::xxxx:xxxx:xxxx:f993%3
192.168.1.254
… and it can resolve ipv6 addresses but cannot do any ipv6 traffic. Trying to get stateless working obviously and advertise is on in ND. I can see the IPv6 connection attempts from my PC in the Mikrotiks IPv6 firewall which seems odd. That f993%3 is the address of port3 on the Mikrotik. Should it not be using the address of the LAN interface for the gateway rather than the address of port3?
OK, turned off ND broadcast on all, left it on on the LAN interface and its working:
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : xyzz:xyzz:xyzz:x01:abcd:eeee:bbbb:yyyy
Temporary IPv6 Address. . . . . . : xyzz:xyzz:xyzz:x01:zzzz:zzzz:eeee:yyyy
Link-local IPv6 Address . . . . . : fe80::xxxx:xxxx:xxxx:xx37%3
IPv4 Address. . . . . . . . . . . : 192.168.1.33
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : fe80::yyyy:yyyy:yyyy:f993%3
192.168.1.254
Would still love to know if I’ve assigned the IP address correctly to the LAN interface.