Hello,
I am asking for your help on ipv6 which was working but has now stopped.
If you have any ideas for testing as I suspect something is broken with my ISP doing a recent ipv6 deployment.
First of all the modem doesn’t work like most of the setups I see on the forum.
We do not use PPPoe
The modem sends the identifiers over the network to the box.
We do not know our credentials.
The box cannot be in Bridge.
The only functionality is DMZ mode.
I am in IPV4 with Mikrotik and in DMZ, everything is OK.
I made the settings for IPV6 in DMZ as well and everything was OK, but for 7 days I have been tearing my hair out because the Internet link no longer works.
The IPV6 distribution on the devices is OK.
I can ping my machines locally but I can no longer go out on the internet.
From the Mikrotik RB4011 router I can ping google ipv6.
I am currently using the basic ipv6 filters from a reset of the router configuration but nothing better.
This is how the modem works (DMZ only)
BOX
I receive a fixed IP with a / 56 prefix
In the DMZ option I get a subnet / 64 with a gateway IP
SLAAC is activated on the box.
RB4011
In mikrotik I added an address like this: 2a02: xxxx: xxx: x302 :: 1/64
From there I could have an ipv6 address on my machines and go out to the internet.
The ipv6 test sites were OK on the fact that I am good at IPV6.
Today I can no longer ping the internet.
Windows indicates that there is no internet connection.
I don’t see any ipv6 dhcp.
Can you give me help or search ?
this configuration is exactly the same when it was working.
Thank you
I can reach your router, check twice the config:
C:\WINDOWS\system32>tracert 2a02:8428:654:a302::1
Traccia instradamento verso 2a02-8428-0654-a302-0000-0000-0000-0001.rev.sfr.net [2a02:8428:654:a302::1]
su un massimo di 30 punti di passaggio:
1 11 ms <1 ms <1 ms 2002:b90b:2347:1::1
2 41 ms 40 ms 41 ms 2002:9164:bc1d::1
3 41 ms * 41 ms 2001:610:188:140:145:100:188:253
4 38 ms 42 ms 41 ms 2001:610:188:a0:145:97:20:150
5 44 ms 42 ms 40 ms eae22-1201.asd066a-jnx-01.surf.net [2001:610:fc7:0:145:145:14:14]
6 39 ms 37 ms 48 ms 2001:610:e00:2::294
7 40 ms 38 ms 43 ms 2001:610:e00:1:145:145:128:4
8 49 ms 61 ms 55 ms 2001:7f8:1::a501:5557:1
9 * * * Richiesta scaduta.
10 * * * Richiesta scaduta.
11 * * * Richiesta scaduta.
12 * * 54 ms 2a02-8400-0000-0003-0000-0000-0000-625d.rev.sfr.net [2a02:8400:0:3::625d]
13 58 ms 60 ms 57 ms 2a02-8428-0654-a302-0000-0000-0000-0001.rev.sfr.net [2a02:8428:654:a302::1]
wow! what’s going on here then ?
I can’t get out, and is it possible to ping my address ?
What am I doing wrong, I can no longer understand … Anyway thank you for taking the time to watch! it is very pleasant to you.
I have been looking at the setup for 5 days without understanding what is wrong. I’m desperate
Sorry, but I’m not able to help you on IPv6 because actually i do not use this, I just “tracert” it on windows :((
I just remember one thing:
On windows put dns on hand because windows do not read dns.
Have you tried rebooting the router? I’ve come across a glitch once or twice where router advertisements stop being sent and a reboot has corrected the issue. It is very rare though - last time it happened to me was over a year ago.
(P.S.: The net is very nice… One Italian than try to help one Française wit English on Latvian device maded with Taiwanese components…)
yes i restarted it several times, i will try to shut it down completely. For windows I also tried to force the dns but nothing better. It’s totally strange, under windows I have had surprises in the past but the mac osx which are less capricious cannot go on the internet either.
start from this config, remove other ipv6 address on /ipv6 address and the other manual ipv6 route on /ipv6 route:
/ipv6 route
add distance=10 gateway=>>>*** source ipv6 interface ***<<<
add distance=1 dst-address=2000::/3 gateway=2a02:8428:654::
/ipv6 address
add address=2a02:8428:654:a302:1::1 interface=ether2-LAN
add address=2a02:8428:654:a301:7fd1:ba6f::/56 advertise=no interface=>>>*** source ipv6 interface ***<<<
/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes interface=all managed-address-configuration=no other-configuration=no
my previous post has modified for typo, check again
it does not progress better 
use out inerface on gateway, not IPv6 ip on ::/0 route, check twice my modified post, please
on script >>>*** source ipv6 interface <<< must be like “ether1-WAN” (I haved use your ether2-LAN as example)
but I see you have also one bridge, for what?
if the ether2-LAN is part of the bridge, you must assign the ip to the bridge, not to singe ethernet
if the bridge are the “WAN”, you must use “bridge” as >>> source ipv6 interface ***<<<
/ipv6 route
add distance=10 gateway=>>>*** source ipv6 interface ***<<<
add distance=1 dst-address=2000::/3 gateway=2a02:8428:654::
/ipv6 address
add address=2a02:8428:654:a302:1::1 interface=ether2-LAN
add address=2a02:8428:654:a301:7fd1:ba6f::/56 advertise=no interface= >>>*** source ipv6 interface ***<<<
/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes interface=all managed-address-configuration=no other-configuration=no
The bridge are ether2-LAN
ether1 are WAN
paste this on terminal:
/ipv6 route
remove [find where dynamic=no]
add distance=10 gateway=ether1
add distance=1 dst-address=2000::/3 gateway=2a02:8428:654::
/ipv6 address
remove [find]
add address=2a02:8428:654:a302:1::1 interface=bridge
add address=2a02:8428:654:a301:7fd1:ba6f::/56 advertise=no interface=ether1
/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes interface=all managed-address-configuration=no other-configuration=no
I’m so sorry I couldn’t do it, I followed the procedure, but I have no result.
last try:
/ipv6 route
remove [find where dynamic=no]
add distance=10 gateway=ether1
add distance=1 dst-address=2000::/3 gateway=2a02:8428:654::
/ipv6 address
remove [find]
add address=2a02:8428:654:a302:1::1 interface=bridge
add address=2a02:8428:654:a302::/16 advertise=no interface=ether1
/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes interface=all managed-address-configuration=no other-configuration=no
Try to ping google dns from routerboard and from windows:
2001:4860:4860::8888
