Community discussions

MikroTik App
 
CR24
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 61
Joined: Wed Dec 04, 2013 10:32 pm

IPv6 Link-Local Addresses

Sun Jan 06, 2019 10:47 pm

Can IPv6 link-local addresses be disabled? I cant seem to find the option anywhere so I do not know if Mikrotik has the option or not. I am able to remove the addresses manually by deleting them under the addresses list, but every time I restart the device all interfaces self generate a link-local address, which I understand is the purpose, but I would like to disable link-local all together and only utilize static addresses.
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1782
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: IPv6 Link-Local Addresses

Mon Jan 07, 2019 1:13 am

Hey

To my knowledge no. Alternative: script it after boot?
 
CR24
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 61
Joined: Wed Dec 04, 2013 10:32 pm

Re: IPv6 Link-Local Addresses

Mon Jan 07, 2019 5:10 am

Yeah that is what I was going to look at was a script but I figured I would ask if there was a setting to disable link-local that I was missing, but I guess Mikrotik just doesnt have it.

Thank you.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: IPv6 Link-Local Addresses

Mon Jan 07, 2019 9:14 am

Out of curiosity: why are link-local addresses bothering you?
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7042
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: IPv6 Link-Local Addresses

Mon Jan 07, 2019 1:55 pm

I would suggest not to remove link local addresses but block access in firewall.
 
CR24
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 61
Joined: Wed Dec 04, 2013 10:32 pm

Re: IPv6 Link-Local Addresses

Tue Jan 15, 2019 11:09 pm

The link-local addresses are not "bothering" me, link-local just creates a potential issue on my WAN network, which is not only made up of my routers/devices but also customer routers/devices. Said devices are being supplied with a Static IP address, but lets say an end-user decided to enable link-local on their device, thus allowing them to bypass the firewall rules, speed restrictions, etc that are all in place based on IP address.

Being able to simply disable link-local would be a quick and easy solution to this, but seeing as that is not an option that leaves me with either running a script to remove the link-local addresses that are created after a reboot, or adding in firewall rules to block all link-local traffic, which I understand is not a big undertaking at all. The point of this thread was just to find out if I was missing the option to disable link-local or if MT just did not have it, which that question has been answered.
 
User avatar
Paternot
Forum Veteran
Forum Veteran
Posts: 953
Joined: Thu Jun 02, 2016 4:01 am
Location: Niterói / Brazil

Re: IPv6 Link-Local Addresses

Tue Jan 15, 2019 11:23 pm

IPv6 is completely dependent upon link local: it took over many tasks done by ARP in IPv4. Don't even try to run an IPv6 network without them.
 
srTeCHNoiD
just joined
Posts: 7
Joined: Thu Feb 28, 2019 4:04 pm

Re: IPv6 Link-Local Addresses

Wed Jun 22, 2022 2:25 pm

Same option needed, vrrp interface cant work normal with link-local address installed, cant sync with keeplalived. Maybe its a bug?
1.png
You do not have the required permissions to view the files attached to this post.
 
srTeCHNoiD
just joined
Posts: 7
Joined: Thu Feb 28, 2019 4:04 pm

Re: IPv6 Link-Local Addresses

Wed Jun 22, 2022 3:55 pm

Keepalived writing in logs:
Keepalived_vrrp[4447]: (VI_6) received an unexpected ip number count 2, expected 1!
 
Sob
Forum Guru
Forum Guru
Posts: 9119
Joined: Mon Apr 20, 2009 9:11 pm

Re: IPv6 Link-Local Addresses

Thu Jun 23, 2022 5:23 am

I think it's correct, your link-local address is derived from VRRP's virtual MAC address 00-00-5E-00-02-xx, and:
For IPv6, the first address must be the IPv6 link-local address associated with the virtual router.
So you should have that one in keepalived's config too.

Who is online

Users browsing this forum: Ahrefs [Bot], aoakeley, gogle, kub1x, sybadi and 96 guests