IPv6 local subnet notation?

RouterOS General
1

Hi, I had been busy setting up my rb for ipv6,
and I could use some help with the firewall.
In the ipv4 world, I have the following rule:

/ip firewall filter
add action=accept chain=forward comment="Allow new connections from LAN." \
    connection-state=new in-interface=ether6-master-LAN src-address=\
    192.168.86.0/24

Being that the lan above is NATed behind a public IP,
I have a known non-routable subnet that I can define as the allowed source network establishing new connections from LAN side.
In ipv6 I have the similar:

/ipv6 firewall filter
add action=accept chain=forward comment="Allow new connections from LAN." \
    connection-state=new in-interface=ether6-master-LAN

Having public/routable addresses in my LAN dynamicaly assigned by my isp is nice and all,
but by not having a known subnet I can’t define the src-address as a condition matcher to allow traffic
and I have to resort in matching by interface only.

So, I guess the question is, Is there any shortcut notation in ipv6
denoting “local subnet” (whatever this might be at the time)
that I could use for condition matching in the src-address field?

Thanks.

2

If you have own /48 prefix, notation:
2001:535:fb15::/48 - this is your network IPv6
2001:535:fb15:aaaa::/64 - this is “aaaa” subnet of your IPv6 /48 prefix

3

Do you need these explicit checks if you have

/ip settings
set rp-filter=strict
4

Thanks for taking time to reply.
That I understand, unfortunately it will not do.
I have a /56 on wan (pppoe to isp), subnetted to /64s inside (lan side).
The issue is that the isp changes the supplied wan ip prefix on pppoe down/up.
So I can’t use the real address as matcher.
Hence the question about the existence(?) of an ipv6 shortcut notation denoting local subnet whatever this might be at the time.
I googled it and came up with nothing, so I thought asking here might help.

5

I suppose not, not really.
Its already on strict, I just feel better having an extra check inplace :slight_smile: