ipv6 routing for LAN

RouterOS General
1

I managed my routerboard to ping ipv6 addresses on internet via 6to4 protocol. I was using this manual http://wiki.mikrotik.com/wiki/Manual:IPv6_Overview (section 6to4 tunnels). But how can I manage my LAN clients to get access to ipv6 internet? I tried to translate the LAN ipv4 address 192.168.2.1 (which is on bridge1, default gw to all LAN clients) to ipv6 with prefix /64, and then add it to my bridge interface and then advertise it. My computer then automatically configured the sit0 interface, like this:
sit0: <NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN
link/sit 0.0.0.0 brd 0.0.0.0
inet6 ::192.168.2.101/96 scope global
valid_lft forever preferred_lft forever
inet6 ::127.0.0.1/96 scope host
valid_lft forever preferred_lft forever
inet6 2002:d910:4f01::1/16 scope global
valid_lft forever preferred_lft forever
On my wlan0 interface it added new ipv6 address with prefix /64. But I cannot ping ipv6 internet.
How should i do this?

2

http://wiki.mikrotik.com/wiki/Manual:My_First_IPv6_Network

3

I followed this manual too, regarding Lan segment address block (I just convert my private ipv4 address to ipv6) but no success. I don’t need ospf so I didn’t follow this part. Only 6to4 tunnel and Lan segment.

4

Post the configuration you applied, at a minimum “/interface 6to4 export” and “/ipv6 export”.
Your descriptions are much too vague to even guess.

Can you ping across the tunnel interface to the other side directly from the router?

5 



/interface 6to4 export
# oct/27/2010 18:27:52 by RouterOS 4.11
# software id = 10UK-CTNR
#
/interface 6to4
add comment="" disabled=no local-address=85.30.96.10 mtu=1280 name=sit1 remote-address=unspecified




/ipv6 export
# oct/27/2010 18:28:36 by RouterOS 4.11
# software id = 10UK-CTNR
#
/ipv6 address
add address=2002:551e:600a::1/128 advertise=no comment="" disabled=no eui-64=no interface=sit1
add address=2002:c0a8:201::1/64 advertise=yes comment="" disabled=no eui-64=no interface=bridge1
/ipv6 nd
add advertise-dns=no advertise-mac-address=yes disabled=no hop-limit=unspecified interface=all managed-address-configuration=no mtu=\
    unspecified other-configuration=no ra-delay=3s ra-interval=3m20s-10m ra-lifetime=30m reachable-time=unspecified retransmit-interval=\
    unspecified
/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d
/ipv6 route
add disabled=no distance=1 dst-address=2000::/3 gateway=::192.88.99.1%sit1 scope=30 target-scope=10

From the router I can ping everything on ipv6 internet. Also I can ping from my computer to both ipv6 address on sit1 and bridge1 interfaces and vice versa. ipv6 address which was assigned to my computer with advertise option is 2002:c0a8:201:0:21f:3aff:fe14:cf3/64 (linux mashine).
Traceroute from my computer to ipv6.google.com:

traceroute6 2a00:1450:8004::93
traceroute to 2a00:1450:8004::93 (2a00:1450:8004::93) from 2002:c0a8:201:0:21f:3aff:fe14:cf3, 30 hops max, 16 byte packets
 1  2002:c0a8:201::1 (2002:c0a8:201::1)  103.812 ms  1.041 ms  0.887 ms
 2  * * *
 3  * * *

It end on router bridge1 interface. Hope I was more descriptive this time :slight_smile:

6

When using 6to4, you must have addresses in 2002:aabb:ccdd::/48 range, where “aabb:ccdd” is derived from IPv4 address. For local subnets you need /64, so it leaves you only “xxxx” part that you can change any way you want: 2002:aabb:ccdd:xxxx::1/64.

Instead of 2002:c0a8:201::1/64 use e.g. 2002:551e:600a:1::1/64 and it will work.

7

YESSS!!! Thank you very much :slight_smile: