Community discussions

MikroTik App
 
garis
just joined
Topic Author
Posts: 9
Joined: Sat Apr 10, 2021 3:44 pm

IPv6 config

Sat Apr 10, 2021 4:11 pm

Hi all,
I am trying to setup IPv6 on my new hAP ac3.
In extreme summary: I can reliably get an IPv6 on the Mikrotik and on my PC connected to it. The Mikrotik can ping 2606:4700:4700::1111 but my PC cannot.

Details:
Using my ISP default modem/router I am able to get full IPv6 connectivity (tunnel 4to6 of something similar). Now I have attached the ether1 of the Mikrotik to one Ethernet port of my ISP modem/router. IPv4 is working.
For the IPv6 part instead the DHCPv6 client and relay seems to be working.

The IPv6 from my ISP on the LAN are all inside 2001:b07:XXXX:YYYY::1/64.
I enabled the DHCPv6 client on the Mikrotik and I can see that is able to get the IP 2001:b07:XXXX:YYYY::126/64 (126 for the DHCP reservation done on the IPv4 192.168.1.126).
I enabled the DHCPv6 relay and my PC is getting 2001:b07:XXXX:YYYY:5e4:434e:fdfa:feb4/64 together with fe80::bc8b:95d5:a687:6740/64 and 192.168.2.100/24

I suspect something wrong in the Mikrotik, maybe the IPv6 address list or the Neighbor Discovery, does somebody have any idea what I am missing?
Thank you.

Mikrotik IPv6 ping and config:
[admin@MikroTik] > ping address=2606:4700:4700::1111
SEQ HOST SIZE TTL TIME STATUS
0 2606:4700:4700::1111 56 58 25ms echo reply
[admin@MikroTik] > ipv6 export
# apr/10/2021 15:02:57 by RouterOS 6.48.1
# software id = 2QWF-MK0W
#
# model = RBD53iG-5HacD2HnD
# serial number = D96C0CD8DCAD
/ipv6 address
add address=2001:b07:XXXX:YYYY:4a8f:5aff:feab:93a1 eui-64=yes interface=bridge
/ipv6 dhcp-client
add add-default-route=yes interface=ether1 pool-name=IPv6 request=address
/ipv6 dhcp-relay
add dhcp-server=2001:b07:XXXX:YYYY::1%ether1 interface=bridge name=IPv6Relay
/ipv6 firewall filter
add action=accept chain=input comment="accept established connections" connection-state=established,related
add action=accept chain=input comment="accept ICMP6 messages" limit=100,10:packet protocol=icmpv6
add action=accept chain=forward comment="accept established connections" connection-state=established,related
add action=accept chain=forward comment="accept ICMP6 messages" limit=100,10:packet protocol=icmpv6
add action=drop chain=forward comment="drop invalid connections" connection-state=invalid disabled=yes
/ipv6 nd
set [ find default=yes ] other-configuration=yes
/ipv6 nd prefix
add autonomous=no interface=bridge on-link=no
/ipv6 settings
set accept-redirects=no accept-router-advertisements=yes
Laptop:
   ~  ip -6 route
::1 dev lo proto kernel metric 256 pref medium
2001:b07:XXXX:YYYY::/64 dev wlo1 proto ra metric 600 pref medium
fe80::/64 dev wlo1 proto kernel metric 600 pref medium
default via fe80::4a8f:5aff:feab:93a1 dev wlo1 proto ra metric 20600 pref medium

   ~  ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
3: wlo1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 40:74:e0:90:80:a8 brd ff:ff:ff:ff:ff:ff
altname wlp0s20f3
inet 192.168.2.100/24 brd 192.168.2.255 scope global dynamic noprefixroute wlo1
valid_lft 522sec preferred_lft 522sec
inet6 2001:b07:XXXX:YYYY:5e4:434e:fdfa:feb4/64 scope global dynamic noprefixroute
valid_lft 2591737sec preferred_lft 604537sec
inet6 fe80::bc8b:95d5:a687:6740/64 scope link noprefixroute
valid_lft forever preferred_lft forever
4: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 52:54:00:f1:6b:e1 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
   ~  ping -6 2606:4700:4700::1111
PING 2606:4700:4700::1111(2606:4700:4700::1111) 56 data bytes
^C
--- 2606:4700:4700::1111 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2030ms
 
garis
just joined
Topic Author
Posts: 9
Joined: Sat Apr 10, 2021 3:44 pm

Re: IPv6 config  [SOLVED]

Sun May 23, 2021 7:24 pm

By disabling the IPv6 on LAN from the ISP router and using the 6to4 tunnel provided by the ISP (HE tunnel style) I was able to get IPv6 to work.

After disabling IPv6 LAN on ISP router, something like this works:
/ipv6 address
add address=2001:b07:XXXX:YYYY::512/128 advertise=no disabled=no eui-64=no from-pool="" interface=IPv6Tunnel no-dad=no
add address=2001:b07:XXXX:YYYY::/64 advertise=yes disabled=no eui-64=no from-pool="" interface=bridge no-dad=no

/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes disabled=no hop-limit=unspecified interface=all managed-address-configuration=no mtu=unspecified other-configuration=yes ra-delay=3s ra-interval=3m20s-10m ra-lifetime=15m \
    reachable-time=unspecified retransmit-interval=unspecified

/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d

/ipv6 route
add !bgp-as-path !bgp-atomic-aggregate !bgp-communities !bgp-local-pref !bgp-med !bgp-origin !bgp-prepend !check-gateway disabled=no distance=1 dst-address=2000::/3 gateway=IPv6Tunnel !route-tag scope=30 target-scope=10

/ipv6 settings
set accept-redirects=yes-if-forwarding-disabled accept-router-advertisements=yes-if-forwarding-disabled forward=yes max-neighbor-entries=8192

Who is online

Users browsing this forum: No registered users and 35 guests