MikroTik IKEv2 Road Warrior IKEv2 VPN with Dynamic Public IPv6 from ISP PD
Any solution to this ?
Getting a /56 pool from ISP. Can't figure out a hack either. The problem is that it is not possible to borrow a range manually from that pool.
MikroTik RouterOS does not support assigning a IPv6 address through the mode-config.
You can enable DynDNS (in IP - cloud) to get [serial].sn.mynetname.net point to WAN IP address of your router (I'm pretty sure it works for IPv6 as well).
Or you could use MT's own Back to Home service which deals with dynamic address oof your home router.
This would allow your road warrior to "phone home". I'm not sure how one should configure IP and IPv6 addressing to be used for the inside of VPN connection though.
Phone home is not the problem. Want the VPN client to get an official IPv6 address, from my delegated range. No problem with OPNsense, or other https://strongswan.org/ based.
It is a long-standing issue that you can’t populate one Mikrotik pool from another, for example splitting a dynamic PD pool e.g. for a mix of local LAN SLAAC (/64), DHCPv6 clients (/128), onward PPPoE/DHCPv6 server delegation (/63 - /56), etc.
There is also the issue of how to handle provider PD changes if your WAN connection briefly drops and the previously allocated address is not sticky - whilst SLAAC can advertise the previous addresses with a lifetime of zero there are no mechanisms to update revoke DHCP assigned addresses before the lease period expires. This is why ISPs should stop using dynamic PD assignment https://www.ripe.net/publications/docs/ripe-690/#5--end-user-ipv6-prefix-assignment--persistent-vs-non-persistent