Community discussions

MikroTik App
 
EileK
just joined
Topic Author
Posts: 10
Joined: Sun Jun 27, 2021 7:24 pm

Setting up IPv6 with port forwarding?

Tue Nov 23, 2021 7:25 pm

Hi,
I've been trying to setup my network to support IPv6. I can't seem to figure it out, however. Here's a quick network diagram to help illustrate things:
Untitled drawing.png
I'm trying to set up IPv6 so I can port forward on the webserver and VPN server (preferably others, though) and have outside connectivity, while also remaining secure. The webserver and VPN will remain connected directly to the Hap AC2 directly, on the same ports if that matters. I already have the following config after following this guide, however, at the current moment I do not have internet access on any device (Arch Linux, Debian, Windows 10 with IPv6 enabled). How would I go about doing all of this? I am very new to networking in general, and IPv6 is completely foreign to me. I know it is a very specific use case, and as such, any and all help would be much appreciated. I already have 2 IPv6 capable VPN servers, and can set up a DHCPv6 server if needed to do this.
You do not have the required permissions to view the files attached to this post.
 
tdw
Forum Guru
Forum Guru
Posts: 1843
Joined: Sat May 05, 2018 11:55 am

Re: Setting up IPv6 with port forwarding?

Tue Nov 23, 2021 9:13 pm

There is no /ipv6 firewall nat, you just permit the desired protocol/port(s) with /ipv6 firewall filter add add action=accept chain=forward ... rules to the public IPv6 address assigned to the web (or other) server before the drop foward from external interface rule. Blocking ICMP is a bad idea, it breaks PMTUD.
 
EileK
just joined
Topic Author
Posts: 10
Joined: Sun Jun 27, 2021 7:24 pm

Re: Setting up IPv6 with port forwarding?

Tue Nov 23, 2021 9:39 pm

There is no /ipv6 firewall nat, you just permit the desired protocol/port(s) with /ipv6 firewall filter add add action=accept chain=forward ... rules to the public IPv6 address assigned to the web (or other) server before the drop foward from external interface rule. Blocking ICMP is a bad idea, it breaks PMTUD.
Ah. How would I go about giving a device a static IPv6 address if the prefix changes? So far, not only is connectivity entirely broken, but the prefixes change frequently too. That is why I was unsure of how to go about this. Thanks for replying!
 
Emil66
Frequent Visitor
Frequent Visitor
Posts: 62
Joined: Tue Aug 28, 2018 2:09 am

Re: Setting up IPv6 with port forwarding?  [SOLVED]

Wed Nov 24, 2021 1:39 am

How to deal with variable prefixes: viewtopic.php?t=168470
How to set a static interface identifier is device dependent. The key words to search for are EUI-64 or, preferably, "tokenized interface identifier".
 
EileK
just joined
Topic Author
Posts: 10
Joined: Sun Jun 27, 2021 7:24 pm

Re: Setting up IPv6 with port forwarding?

Wed Nov 24, 2021 3:28 am

Thanks for the help! Definitely going to take a look at this. Hadn't heard of this before so this is a huge step in the right direction.

Who is online

Users browsing this forum: No registered users and 37 guests