IPv6 only inside

Hi Forum,

Wondering about how I can go about this.

I get IPv4 and IPv6 from ISP over PPPoE - naturally currently I dual stack IPv4 LAN IP that NAT’s out the PPPoE interface, and IPv6 public space handed out via SLAAC.

Is there a reasonable way to manage only have IPv6 on the inside, and only accessing IPv4 via NAT but translating via IPv6 when required?

I only want to try this as an experiment, there may be no technical use or benefit to it, but just curious to know if it can be done.

Thanks

This is called NAT64/DNS64, and Mikrotik doesn’t support it.

I’m considering an experiment where I put the NAT64 kernel driver (this is not a feature of the official kernel code) into a OpenWRT image, and make a Metarouter image that does this - also just for my own mad science experiments.

(in case you’re wondering, the DNS64 part is important too - so when your v6-only PC requests an IPv6 address for a hostname which is V4-only in dns, the NAT can send a special IPv6 address in stead which goes to your nat64 box.

You could use a router in front of your firewall (virtual machine) on which you install SIIT.

Some people work on IPv6 only (internally), me for instance. But I dualstack my mail and webservers at the moment as the enviroment is small. But taking it a bit larger, suchs as a content provider or ISP then you need to look at youtubes of Tore Anderson.

Facebook is working on being ipv6 only internally and have IPv4 as a legacy feature on the edge, whether that is as me dualstacked on the front servers or that it’s done at routing level with SIIT. < SiiT

See also for my request for SIIT functionality in RouterOS.
http://forum.mikrotik.com/t/siit-support-thoughts/86659/1