Goodday all,
I have recently upgraded my home network to ROSv7, I waited a longer time because I have a residential fiber setup with dual-stack and vlan/IGMP TV. I was happy to get everything up and running but now I am only left with flaky IPv6 config. After quite some testing and searching online I learned that there is an apparent issue with the combination of hardware offloading on the bridge, multicast and IGMP snooping.
In other topics (http://forum.mikrotik.com/t/clients-lose-ipv6-connectivity-after-a-few-minutes/140046/1) I learned that there might be a way to add static MDB records or setup PIM interfaces. I managed to get IPv6 Router Advertisements to reach my clients. However no real IPV6 connectivity that remains stable.
My setup:
RB3011: ppoe client that retrieves IPv4 Public address, IPv6 /48 Prefix delegated subnet, hosts all vlans (no bridge setup)
CRS328: L3 hw offloaded, VLAN enabled bridge with IGMP snooping enabled
Cap ac aps: no capsman
Below my CRS328 bridge export. In order to get my RA and SLAAC ‘working’ again, I enabled multicast querier and added a static entry for ff02:: in the MDB list to vlan 60. However no real connectivity is achieved.
# 2023-09-05 09:51:07 by RouterOS 7.11.2
# model = CRS328-24P-4S+
/interface bridge
add fast-forward=no igmp-snooping=yes ingress-filtering=no multicast-querier=\
yes name=bridge vlan-filtering=yes
/interface bridge mdb
add bridge=bridge group=ff02:: ports="bridge,ether1,ether2,ether3,ether4,ether\
5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ethe\
r15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,sfp-sfpplus2" \
vid=60
/interface bridge port
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether1 pvid=70
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether2
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether3 pvid=70
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether4 pvid=70
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether5 pvid=70
add bridge=bridge ingress-filtering=no interface=ether6
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether7
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether8
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether9 pvid=60
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether10 pvid=1000
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether11 pvid=70
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether12 pvid=60
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether13 pvid=60
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether14
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether15 pvid=70
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether16 pvid=70
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether17 pvid=70
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether18 pvid=60
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether19 pvid=60
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether20 pvid=70
add bridge=bridge ingress-filtering=no interface=ether21 pvid=70
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether22
add bridge=bridge comment="Disabled ivm deelname Synology Bond" \
ingress-filtering=no interface=ether23
add bridge=bridge comment="Disabled ivm deelname Synology Bond" \
ingress-filtering=no interface=ether24
add bridge=bridge comment=KPN frame-types=admit-only-vlan-tagged interface=\
sfp-sfpplus1
add bridge=bridge comment=RB3011 frame-types=admit-only-vlan-tagged \
ingress-filtering=no interface=sfp-sfpplus2
add bridge=bridge frame-types=admit-only-vlan-tagged interface=sfp-sfpplus3
add bridge=bridge ingress-filtering=no interface=sfp-sfpplus4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=*1E pvid=70
/interface bridge settings
set allow-fast-path=no
/interface bridge vlan
add bridge=bridge comment="IPTV upstream" tagged=bridge,sfp-sfpplus1 \
vlan-ids=4
add bridge=bridge comment="Internet PPPoE" tagged=\
bridge,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=6
add bridge=bridge comment="IPTV LAN" tagged="bridge,sfp-sfpplus2,ether6,ether2\
,ether7,ether8,ether14,ether22,sfp-sfpplus3" vlan-ids=40
add bridge=bridge comment=LAN tagged="bridge,sfp-sfpplus2,sfp-sfpplus3,ether6,\
ether8,ether2,ether14,ether22,ether21,ether7" untagged=\
ether20,ether1,ether9,ether19,ether13,ether12 vlan-ids=60
add bridge=bridge comment=Devices tagged="sfp-sfpplus2,ether8,ether2,ether7,et\
her22,ether6,sfp-sfpplus3,ether14,bridge" untagged="ether21,*1E,ether3,eth\
er17,ether1,ether5,ether4,ether11,ether15,ether16,ether20" vlan-ids=70
add bridge=bridge tagged="sfp-sfpplus2,ether2,ether7,ether8,ether14,ether22,sf\
p-sfpplus3,bridge,ether21" untagged=ether10 vlan-ids=1000
add bridge=bridge comment=Guest tagged=\
sfp-sfpplus2,ether2,ether7,ether8,ether14,ether22 vlan-ids=80
Happy to learn if somebody has a temporary fix with static configs while we wait until IGMP, multicast and vlans play nice together 