Community discussions

MikroTik App
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Topic Author
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

IPv6 firewall features

Wed Jul 16, 2008 4:21 pm

As you probably know IPv6 is slowly coming with all the new features and options. So it might be good time to look at things that are missing.

This time we would like to know what do you need in IPv6 firewall (filter,mangle) - What matchers? What actions? What IPv6 options?
 
User avatar
omega-00
Forum Guru
Forum Guru
Posts: 1167
Joined: Sat Jun 06, 2009 4:54 am
Location: Australia
Contact:

Re: IPv6 firewall features

Tue Jul 29, 2008 2:53 pm

Will IPv6 DHCP be available soon as well? :-)

- address-lists are useful currently, would be nice to have IPv6 address lists supported.

Also interested on how well the hotspot will cope with IPv6, assuming there is some upgrades required to the inbuilt DNS server to make it work with IPv6

Perhaps a mikrotik rep would care to put up a guide as to how to run a dual-stacked hotspot when the time comes?
 
User avatar
gustkiller
Member
Member
Posts: 419
Joined: Sat Jan 07, 2006 5:15 am
Location: Brazil
Contact:

Re: IPv6 firewall features

Tue Jul 29, 2008 3:10 pm

...and a dual stack operation how to.
- ipv6 simple queues
- NAT-PT ( for make backwards compatibility with ipv4 destinations in a ipv6only network)
 
User avatar
omega-00
Forum Guru
Forum Guru
Posts: 1167
Joined: Sat Jun 06, 2009 4:54 am
Location: Australia
Contact:

Re: IPv6 firewall features

Wed Jul 30, 2008 9:24 am

http://arstechnica.com/articles/paedia/ ... essing.ars - Article on IPv6 Firewalling (Interesting read)
 
User avatar
Elvaelf
just joined
Posts: 6
Joined: Sun Dec 16, 2007 1:44 pm
Location: ShangHai,China
Contact:

Re: IPv6 firewall features

Sun Aug 03, 2008 11:13 am

Just mikrotik v3.x support IPV6?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26381
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: IPv6 firewall features

Mon Aug 04, 2008 11:33 am

Just mikrotik v3.x support IPV6?
yes
 
User avatar
andrewluck
Forum Veteran
Forum Veteran
Posts: 700
Joined: Fri May 28, 2004 9:05 pm
Location: Norfolk, UK

Re: IPv6 firewall features

Mon Aug 04, 2008 8:21 pm

I'll second the request for address lists.

Kind regards

Andrew
 
foobaz
just joined
Posts: 8
Joined: Thu Jul 10, 2008 4:44 pm

Re: IPv6 firewall features

Fri Aug 22, 2008 2:29 am

I'd like IPV6 DHCP and DNS.
 
User avatar
roadrunner
Frequent Visitor
Frequent Visitor
Posts: 86
Joined: Thu May 18, 2006 11:22 pm
Location: US

Re: IPv6 firewall features

Tue Aug 26, 2008 9:47 am

I'd like IPV6 DHCP and DNS.
IPv6 ND (Neighbor Discovery) can be used instead of IPv6 DHCP
 
User avatar
omega-00
Forum Guru
Forum Guru
Posts: 1167
Joined: Sat Jun 06, 2009 4:54 am
Location: Australia
Contact:

Re: IPv6 firewall features

Tue Aug 26, 2008 10:47 am

With IPv6 DHCP is mostly used to distribute additional information, such as DNS server addresses, although there will be a way to do this through router advertisements as well soon which may remove the need for it in some more locations.
 
User avatar
roadrunner
Frequent Visitor
Frequent Visitor
Posts: 86
Joined: Thu May 18, 2006 11:22 pm
Location: US

Re: IPv6 firewall features

Tue Aug 26, 2008 12:28 pm

I keep on forgetting that ND does just the basic addressing and that DHCP is still used for a lot of the rest of the informantion.
 
User avatar
roadrunner
Frequent Visitor
Frequent Visitor
Posts: 86
Joined: Thu May 18, 2006 11:22 pm
Location: US

Re: IPv6 firewall features

Tue Aug 26, 2008 12:49 pm

IPv6 firewall features:
- shortcut to match link local addresses easily
- optionally match items within a 6to4 tunnel so those packets don't bypass firewall rules.
- add address-lists like the ipv4 firewall has.

Other IPv6 features:
- 6to4 relay and Miredo/Teredo service
- Enable IPv6 for every service in RouterOS: hotspot, winbox, Dude, Userman, etc.
- PPPoE able to assign and route dynamic /64 blocks (out of a larger block) to PPPoE users.
 
User avatar
omega-00
Forum Guru
Forum Guru
Posts: 1167
Joined: Sat Jun 06, 2009 4:54 am
Location: Australia
Contact:

Re: IPv6 firewall features

Fri Aug 29, 2008 6:24 am

+1 to the following:
- Enable IPv6 for every service in RouterOS: hotspot, winbox, Dude, Userman, etc.
- 6to4 relay and Miredo/Teredo service
 
cmartin
Frequent Visitor
Frequent Visitor
Posts: 55
Joined: Wed Nov 07, 2007 7:04 pm
Location: Plzeň, Czech Republic

Re: IPv6 firewall features

Sat Aug 30, 2008 8:46 pm

I would like to join with:
radvd (router advertising) functionality, which can simplify workstations configuration strongly.
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Topic Author
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: IPv6 firewall features

Mon Sep 01, 2008 3:13 pm

Address-list feature for IPv6 will be added in the next version.

As well there will be the following options,

*) hop-limit matcher;
*) hop-limit action;
*) icmpv6 matcher;
*) ipv6 extension header matcher.

Who is online

Users browsing this forum: Ahrefs [Bot], kormenator and 179 guests