/interface 6to4 add comment="Hurricane Electric IPv6 Tunnel Broker" disabled=no local-address=78.53.216.104 mtu=1280 name=sixbone remote-address=216.66.80.30
/ipv6 route add comment="" disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:1f0a:9bc::1 scope=30 target-scope=10
/ipv6 address add address=2001:470:1f0a:9bc::2/64 advertise=yes disabled=no eui-64=no interface=sixbone

/ipv6 address add address=2001:470:9909:1:20c:42ff:fe52:941/64 advertise=yes comment="" disabled=no eui-64=yes interface=ether2-local

# 6in4 tunnel endpoint update script
# for use with tunnelbroker.com (Hurricane Electric)
# by r@n

# Define User Variables
# Change to the IPv4 interface, which is to be used as tunnel endpoint
:global pubinterface "Alice"

# User ID for tunnelbroker.com (NOT USERNAME!!!)
:global userid "?????????????????"

# Password for tunnelbroker.com as MD5 hash
# Note: Use a generator which does not add a newline to your password!
# This one works fine for me: http://www.miraclesalad.com/webtools/md5.php
:global md5passwd "????????????????"

# Globally unique ID for your tunnel within the tunnelbroker.com plattform
:global gtunnelid "?????"

# DO NOT CHANGE THIS SCRIPT BELOW THIS LINE !!!

# Grab the current IP address on that interface.
:global pubip [ /ip address get [/ip address find interface=$pubinterface ] address ]

# Trim public IP (assumes the subnetmask is larger than 9 bits)
:local tmp ([:len $pubip] - 3)
:set pubip [pick $pubip 0 $tmp]

# Remember last public IP (set at the end of this script, but remains in memory)
:global lastheip
:if ([ :typeof $lastheip ] = nil ) do={ :global lastheip "0" }

:if ($pubip != $lastheip) do={
   :log info "HE: Updating 6in4 tunnel ..."
   
# Update local endpoint IP address on remote site
   :global host "ipv4.tunnelbroker.net"
   :global url "http://ipv4.tunnelbroker.net/ipv4_end.php?ipv4b=$pubip&pass=$md5passwd&user_id=$userid&tunnel_id=$gtunnelid"
   
   /tool fetch url=$url host=$host
   
# Update local endpoint IP address in local configuration
   /interface 6to4 set sixbone disabled=yes
   /interface 6to4 set sixbone disabled=no local-address=[:toip $pubip] 
   
# Advertise IPv6 once more
   :local tmp2 [/ipv6 address find address="2001:470:9909:1:20c:42ff:fe52:941/64"]
   /ipv6 address set $tmp2 advertise=no
   /ipv6 address set $tmp2 advertise=yes

# Refresh default route
   /ipv6 route remove [/ipv6 route find dst-address="2000::/3"]
   /ipv6 route add comment="" disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:1f0a:9bc::1 scope=30 target-scope=10
   
   :log info "Update tunnel endpoint complete. $url"
   
   :set lastheip $pubip
} else={
   :log info "HE: No tunnel update needed."
}

/interface 6to4
add comment="Hurricane Electric IPv6 Tunnel Broker" disabled=no local-address=97.78.xxx.xxx mtu=1280 \
    name=sit1 remote-address=209.51.161.58
/ipv6 route
add comment=" " disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:4:33f::1 scope=30 \
    target-scope=10
/ipv6 address
add address=2001:470:4:33f::2/64 advertise=yes comment="" disabled=no eui-64=no interface=sit1

/ipv6 nd
add advertise-dns=no advertise-mac-address=yes disabled=no hop-limit=unspecified interface=all \
    managed-address-configuration=no mtu=unspecified other-configuration=no ra-delay=3s ra-interval=\
    3m20s-10m ra-lifetime=30m reachable-time=unspecified retransmit-interval=unspecified

[admin@] /ipv6> /interface 6to4
[admin@] /interface 6to4> print 
Flags: X - disabled, R - running 
 #    NAME                                  MTU LOCAL-ADDRESS   REMOTE-ADDRESS 
 0  R ;;; Hurricane Electric IPv6 Tunnel Broker
      sit1                                 1280 XXX.XXX.XXX.XXX   XXX.XXX.XXX.XXX    
[admin@] /interface 6to4> get (sit1) local-address
[admin@] /interface 6to4> 
[admin@] /interface 6to4> get (sit1) LOCAL-ADDRESS
input does not match any value of value-name
[admin@] /interface 6to4> 

# Update Hurricane Electric IPv6 Tunnel Client IPv4 address
# This is an upgrade to an existing script from
# http://wiki.mikrotik.com/wiki/Hurricane_Electric_IPv6_Tunnel_-_IPv4_Endpoint_updater
# API call format:
# https://#USERNAME:$API_KEY@ipv4.tunnelbroker.net/nic/update?username=$USERNAME&password=$API_KEY&hostname=$TUNNEL_ID
# ----------------------------------
# Modify the following to match your parameters
# ----------------------------------

# Router's WAN interface name
:local WANinterface "ppoe-1"

# Router's 6to4 interface name
:local HEtunnelinterface "sit1"

# Your username - you use it to log in at https://tunnelbroker.net
:local HEuserid "NAME"

# Tunnel ID (not name) as written in your tunnel's details at https://tunnelbroker.net
:local HEtunnelid "00000"

# Your Update Key for this tunnel, as written in the "Advanced" tab on tunnel details page
:local HEkey "AAAAAAAAAAAAAA"

# ----------------------------------
# STOP modifying here
# ----------------------------------
# Internal processing below...
# ----------------------------------
:local HEupdatehost "ipv4.tunnelbroker.net"
:local HEupdatepath "/nic/update?"
:local outputfile ("HE-" . $HEtunnelid . ".txt")
:local HEipv4addr

# Get WAN interface IP address
:set HEipv4addr [/ip address get [/ip address find interface=$WANinterface] address]
:set HEipv4addr [:pick [:tostr $HEipv4addr] 0 [:find [:tostr $HEipv4addr] "/"]]

:if ([:len $HEipv4addr] = 0) do={
   :log error ("Could not get IP for interface " . $WANinterface)
   :error ("Could not get IP for interface " . $WANinterface)
}

# Update the HEtunnelinterface with WAN IP
/interface 6to4 {
    :if ([get ($HEtunnelinterface) local-address] != $HEipv4addr) do={
        :log info ("Updating IPv6 Tunnel " . $HEtunnelid . " Client IPv4 address to new IP " . $HEipv4addr . "...")
        disable $HEtunnelinterface

        /tool fetch mode=https host=($HEupdatehost) url=("https://" . $HEuserid . ":" . $HEkey . "@" . $HEupdatehost . $HEupdatepath . "&username=" . $HEuserid . "&pass=" . $HEkey . "&hostname=" . $HEtunnelid) dst-path=($outputfile)

        # Change the client IPv4 address
        set ($HEtunnelinterface) local-address=$HEipv4addr

        # I like to make a little pause before enabling the interface
        /delay 3
        
        # Enable the IPv6 interface
        enable $HEtunnelinterface 

        # Append the file to log for review
        :log info ([/file get ($outputfile) contents])
        
        # Clean up after ourselves
        /file remove ($outputfile)
        
    } else={
        # If client's IPv4 didn't change at all, put it in the log so that we know the script is working
        :log info ("Updating " . $HEtunnelinterface . " No change, IP is still " . $HEipv4addr )
    }   
}