IPv6 Network and IPv4 ISP

RouterOS Beginner Basics
1

Hello Community,

I installed ipv6 package on my RB433AH ROS 4.4
I could ping the router from any PC on my network, but how to configure that I could connect the Internet?
The IPv4 Gateway of my ISP is 10.0.130.1, my Router is 10.0.130.30.

I tried to add a IPv6 Route

/ipv6 route add dst-address=::/0 gateway=::10.0.130.1,wlan1 
failure: Invalid route configuration: Each link-local or IPv4-compatible nexthop
 address must have interface index

wlan1 is the interface to ISP’s Accesspoint.

I added fec0:0:0:1::1/64 as routers IPv6 and fec0:0:0:1::2-5 are clients with gateway and dns fec0:0:0:1::1

Has anyone an idea?

Greeings Manuel

OpenVPN and IPv6
2

Either your ISP must provide IPv6 connectivity or you need to get a tunnel from someone else. RouterOS supports 6to4, but you need public IPv4 address for that. IPv6 also works fine over ethernet type OpenVPN tunnels, but I don’t know about any public service offering that.

3

Hi,
isn’t it possible to “nat” ipv6 to ipv4? I know that i could use a IPv6 tunnel, but i have no public ip. Its a litle ISP which brings broadband internet over Wireless where no normal broadband internet is available. There is only one public ip for X clients.
I only want to use IPv6 in my homenet. Or isn’t this possible?
If not i have to route the subnet from my running IPv6 tunnel on my Root-Server. Is is possible to use IPv6 in Mikrotik OVPN?

Greetings Manuel

4

No simple 4/6 NAT is possible. There are some attempts, but mostly to allow IPv6 only hosts to access old IPv4 internet. Not your thing and not available in RoS.

If you have IPv6 connectivity at another location and can create OpenVPN tunnel, then it’s your best option. Of course, native connectivity would be better, but this is something you can have in ten minutes from now. Following is simplified (important parameters only) example of working setup:

Basic server settings:

/interface bridge add name=ovpn6
/ppp profile add bridge=ovpn6 name=ovpn6srv
/interface ovpn-server server default-profile=ovpn6srv enabled=yes mode=ethernet
/ipv6 address add address=2001:aabb:ccdd:1::1/64 advertise=yes eui-64=no interface=ovpn6
/ipv6 route add dst-address=2001:aabb:ccdd:2::/64 gateway=2001:aabb:ccdd:1::2

Basic client settings:

/interface ovpn-client add mac-address=00:AA:BB:CC:DD:EE mode=ethernet name=ovpn6cli
/ipv6 address add address=2002:aabb:ccdd:1::2/64 advertise=no eui-64=no interface=ovpn6cli
/ipv6 route add dst-address=2000::/3 gateway=2001:aabb:ccdd:1::1
/ipv6 address add address=2002:aabb:ccdd:2::1/64 advertise=yes eui-64=no interface=internal

MAC address in ovpn-client seems to default to all zeros and it doesn’t work. Put there something unique.
In theory it should work even without adding route on client, but it seems that RoS does not pick up router advertisements.

Edit: Above example can support multiple clients. If you need just one, you can skip the whole bridge at server and assign the address directly to static ovpn-server interface.

5

You could use this:
http://tunnelbroker.net/

6

The Mikrotik WIKI does indicate (http://wiki.mikrotik.com/wiki/Manual:IPv6/Overview_and_examples: 6to4 (6in4) tunnels → “This describes solution using global 6to4 relay address”) that tunnel brokers are not needed to get ipv6 networks tunnelled over ipv4 networks, but somehow their HOWTO does not work with ipv6 sub networks, only edge Mikrotik router can somewhat work with it.

My question is should it work for ipv6 sub networks or are usage of a tunnel broker only solution for that?
Btw: Only with ROS 5.0beta2 I did manage to get edge router to ping anything outside of my network with ipv6.

7

If you set up 6to4, you have whole /48 available for yourself, just subnet it as you want. For standard /64 subnets you can have 65536 of them.

Simple example: http://forum.mikrotik.com/t/ipv6/37758/10