I configured one 6to4-tunnel interface for an HE IPv6 tunnel (I called it IPv6Tunnel) and most of the time it works.
The interface IPv6Tunnel seems to be disabled sometimes with the log message "interface,warning IPv6Tunnel transmit loop detected, downing interface for 60 seconds" and I can't figure out why.
Anyone has had experience with this before?
I tried playing with multiple options in various settings without success.
I am also using RouterOS 7.1beta5 and technically have an IPv6 tunnel provided by my ISP modem connected on ether1 but I am not using it at the moment (can't understand if this could be an issue).
Tunnel working:
Config:
Code: Select all
[admin@MikroTik] > ipv6/export verbose
# may/16/2021 09:10:17 by RouterOS 7.1beta5
# software id = 2QWF-MK0W
#
# model = RBD53iG-5HacD2HnD
# serial number = D96C0CD8DCAD
/ipv6 address
add address=2001:470:25:30::2/64 advertise=no disabled=no eui-64=no from-pool="" interface=IPv6Tunnel no-dad=yes
add address=2001:470:26:30::/64 advertise=yes disabled=no eui-64=no from-pool="" interface=bridge no-dad=yes
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" disabled=no dynamic=no list=bad_ipv6
add address=::1/128 comment="defconf: lo" disabled=no dynamic=no list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" disabled=no dynamic=no list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" disabled=no dynamic=no list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" disabled=no dynamic=no list=bad_ipv6
add address=100::/64 comment="defconf: discard only " disabled=no dynamic=no list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" disabled=no dynamic=no list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" disabled=no dynamic=no list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" disabled=no dynamic=no list=bad_ipv6
/ipv6 firewall filter
[...]
/ipv6 firewall mangle
[...]
/ipv6 nd
set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes disabled=no dns=2001:470:25:30::2 hop-limit=unspecified interface=all \
managed-address-configuration=yes mtu=unspecified other-configuration=no ra-delay=3s ra-interval=3m20s-10m ra-lifetime=15m reachable-time=unspecified \
retransmit-interval=10s
/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d
/ipv6 route
add disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:25:30::1 scope=30 target-scope=10
/ipv6 settings
set accept-redirects=yes-if-forwarding-disabled accept-router-advertisements=yes-if-forwarding-disabled disable-ipv6=no forward=yes max-neighbor-entries=8192
[admin@MikroTik] > interface/print
Flags: R - RUNNING; S - SLAVE
Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS
# NAME TYPE ACTU L2MTU MAX- MAC-ADDRESS
0 R ether1 ether 1500 1598 9214 48:8F:5A:AB:93:A0
1 S ether2 ether 1500 1598 9214 48:8F:5A:AB:93:A1
2 S ether3 ether 1500 1598 9214 48:8F:5A:AB:93:A2
3 S ether4 ether 1500 1598 9214 48:8F:5A:AB:93:A3
4 S ether5 ether 1500 1598 9214 48:8F:5A:AB:93:A4
5 RS wlan1 wlan 1500 1600 2290 48:8F:5A:AB:93:A5
6 RS wlan2 wlan 1500 1600 2290 48:8F:5A:AB:93:A6
;;; Hurricane Electric IPv6 Tunnel Broker
7 R IPv6Tunnel 6to4-tunnel 1280 65535
;;; defconf
8 R bridge bridge 1600 1598 48:8F:5A:AB:93:A1
Code: Select all
09:09:59 interface,info IPv6Tunnel link down
09:09:59 route,debug,calc 1.3.1 Tag updated routes for merging
09:09:59 route,debug,calc 1.3.4 Merge route updates
09:09:59 route,debug,calc 2.2 Merge forwarding path updates
09:09:59 route,debug,calc Prepare queued LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:09:59 route,debug,calc Prepare queued LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:09:59 route,debug,calc Prepare queued LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:09:59 route,debug,calc Queue recursively updated IP6/2001:470:25:30::1/30-10/0
09:09:59 route,debug,calc Prepare queued IP6/2001:470:25:30::1/30-10/0
09:09:59 route,debug,calc Inactive interface LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:09:59 route,debug,calc Inactive interface LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:09:59 route,debug,calc Inactive interface LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:09:59 route,debug,calc Resolving LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:09:59 route,debug,calc Resolving LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:09:59 route,debug,calc Resolving LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:09:59 route,debug,calc Resolving IP6/2001:470:25:30::1/30-10/0
09:09:59 route,debug,calc 3 Main publish
09:09:59 route,debug,calc 6.1 Cleanup merge
09:09:59 radvd,debug skip Router Advertisement sending on wlan1: no prefixes to send
09:10:00 interface,warning IPv6Tunnel transmit loop detected, downing interface for 60 seconds
09:10:04 certificate,debug start CRL update
09:10:10 system,info,account user admin logged in from 192.168.2.100 via telnet
09:10:10 ntp,debug tx dstIP:194.0.5.123
09:10:14 ntp,debug tx dstIP:162.159.200.123
09:10:14 ntp,debug rx srcIP:162.159.200.123 dstIP: 192.168.1.126
09:10:14 ntp,debug Message offset:0.000284 delay:0.035789 disp:0.000002
09:10:17 route,debug,calc 3 Main publish
09:10:50 radvd,debug skip Router Advertisement sending on wlan2: no prefixes to send
09:10:59 interface,info IPv6Tunnel link up
09:10:59 route,debug,calc 1.3.1 Tag updated routes for merging
09:10:59 route,debug,calc 1.3.4 Merge route updates
09:10:59 route,debug,calc 2.2 Merge forwarding path updates
09:10:59 route,debug,calc Prepare queued LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:10:59 route,debug,calc Prepare queued LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:10:59 route,debug,calc Prepare queued LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:10:59 route,debug,calc Queue recursively updated IP6/2001:470:25:30::1/30-10/0
09:10:59 route,debug,calc Prepare queued IP6/2001:470:25:30::1/30-10/0
09:10:59 route,debug,calc Set initial reachability for interface LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:10:59 route,debug,calc Set initial reachability for interface LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:10:59 route,debug,calc Set initial reachability for interface LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:10:59 route,debug,calc Apply reachability to LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:10:59 route,debug,calc Apply reachability to LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:10:59 route,debug,calc Apply reachability to LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:10:59 route,debug,calc Propagate reachability for IP6/2001:470:25:30::1/30-10/0
09:10:59 route,debug,calc Apply reachability to IP6/2001:470:25:30::1/30-10/0
09:10:59 route,debug,calc Resolving LINK/%*10/10-5/0/SRCfe80::3:c0a8:201%*10
09:10:59 route,debug,calc Resolving LINK/%*10/10-5/0/SRCfe80::5efe:c0a8:201%*10
09:10:59 route,debug,calc Resolving LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10
09:10:59 route,debug,calc Resolving IP6/2001:470:25:30::1/30-10/0
09:10:59 route,debug,calc Resolved link IP6/2001:470:25:30::1/30-10/0 via 2001:470:25:30::/64->LINK/%*10/10-5/0/SRC2001:470:25:30::2%*10 FLD{1} tr has metric BEST/64
09:10:59 route,debug,calc 3 Main publish
09:10:59 route,debug,calc 6.1 Cleanup merge
09:10:59 radvd,debug skip Router Advertisement sending on IPv6Tunnel: no prefixes to send
09:11:04 certificate,debug start CRL update
09:12:04 certificate,debug start CRL update
09:12:09 radvd,debug skip Router Advertisement sending on ether1: no prefixes to send