Community discussions

MikroTik App
 
xyuri
just joined
Topic Author
Posts: 4
Joined: Thu Nov 11, 2021 7:54 pm

How do I make IPv6 work?

Tue May 16, 2023 2:37 pm

Hi,

I realized my laptop has only link-local ipv6 address. Then I tried:
[admin@MikroTik] > ipv6 address print 
bad command name address (line 1 column 6)
What should I check?

I've got MikroTik hAP lite (RB941-2nD), RouterOS v6.49.6 (stable), Arch Linux.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: How do I make IPv6 work?

Tue May 16, 2023 2:50 pm

1) Your ISP support IPv6?
2) The IPv6 package is installed (or included on bundle package)?
3) The IPv6 package is enabled?

a) The router must be configured to receive, on some way, IPv6 address to redistribute it internally.
b) On your os just do not touch nothing, if all is configured correctly on RouterOS, the PC receive it's own IPv6 by SLAAC.
 
xyuri
just joined
Topic Author
Posts: 4
Joined: Thu Nov 11, 2021 7:54 pm

Re: How do I make IPv6 work?

Sat May 20, 2023 5:01 pm

1) Your ISP support IPv6?
Is there a way to figure it out myself? I'm not sure if it makes sense to ask the ISP.

I should probably say that apparently I'm behind NAT (no public IPv4 address), in case that matters.
2) The IPv6 package is installed (or included on bundle package)?
3) The IPv6 package is enabled?
Good point. It wasn't, but now I think it is. I haven't received an IPv6 address so far though.

Oh, and the terminal command started to work.

Image
Image
a) The router must be configured to receive, on some way, IPv6 address to redistribute it internally.
How do I do that?

If I understand it correctly, the router itself has only link-local addresses:

Image
b) On your os just do not touch nothing, if all is configured correctly on RouterOS, the PC receive it's own IPv6 by SLAAC.
I guess I need to at least set IP6 to something in my netctl profile. And maybe DHCP6Client.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: How do I make IPv6 work?

Tue May 23, 2023 4:50 pm

Why.

ipv4 works
ipv4 does not have recent MT vulnerability
ipv4 on MT works well, ipv6 they seem to be playing never ending game of almost there............
IPv4 has NAT and devices are not accessible from anywhere on the internet ......... ( waiting for ipv6 security experts to explain why this is not an issue )
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7038
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: How do I make IPv6 work?

Tue May 23, 2023 4:56 pm

IPv4 has NAT and devices are not accessible from anywhere on the internet
Security by obscurity is not the way to go. Proper firewall is necessary for both ipv4 and ipv6 to protect the LAN devices.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: How do I make IPv6 work?

Tue May 23, 2023 5:00 pm

I concur MRZ, was just being provacative. NAT is a byproduct not a measured approach.
Not having ventured in IPV6 space, i have severe trepidation of the unknown.
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 3169
Joined: Sun May 01, 2016 7:12 pm
Location: California

Re: How do I make IPv6 work?

Tue May 23, 2023 5:13 pm

Why.
Well, no need for a hairpin NAT in IPv6 ;)

Or perhaps If your ISP uses CGNAT for IPv4 but has IPv6... IPv6 allow a WG tunnel while CGNAT might not...
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: How do I make IPv6 work?

Tue May 23, 2023 6:17 pm

Ahhh, you are tickling my fancy AMMO you rascal!
 
xyuri
just joined
Topic Author
Posts: 4
Joined: Thu Nov 11, 2021 7:54 pm

Re: How do I make IPv6 work?

Wed May 24, 2023 2:52 am

Detailed and easy to understand steps to solve this problem. Thank you for sharing your answer
If that's detailed enough for you, maybe you can make it detailed enough for me? How do I make the router receive IPv6 address to redistribute it internally? Or no further steps are required? It just receives and redistributes it after installing and enabling the ipv6 package?
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 3169
Joined: Sun May 01, 2016 7:12 pm
Location: California

Re: How do I make IPv6 work?

Wed May 24, 2023 2:56 am

Been a while...but In V6, you may have to enable IPv6 package under /system/packages. I recall it being disabled by default in some versions.

But V7 has much better Ipv6 support than V6.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: How do I make IPv6 work?

Wed May 24, 2023 7:09 am

Detailed and easy to understand steps to solve this problem. Thank you for sharing your answer
How do I make the router receive IPv6 address to redistribute it internally?

If you want to distribute IPv6 addresses in LAN, then router gas to obtain a prefix. Which is done by running DHCPv6 client and it has to request a prefix (not address). Then assign an IPv6 address from pool to LAN interface.
 
User avatar
Kentzo
Long time Member
Long time Member
Posts: 512
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: How do I make IPv6 work?

Fri May 26, 2023 12:53 am

But V7 has much better Ipv6 support than V6.
Could you elaborate? I don't see much difference in configuration capabilities as a home-user.

Here is the aggregate of ipv6 changes for v7:
!) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154);
*) ipv6 - added "valid" and "lifetime" parameters for SLAAC IPv6 addresses;
*) ipv6 - send out RA packet with "preferred-lifetime" set to "0" when IPv6 address is deactivated;
*) ipv6 - added "pref64" option configuration for RA;
*) ipv6 - improved handling of "advertise" IPv6 address status changes;
*) ipv6 - limited "hop-limit" parameter value range to 255;
*) ipv6 - made distributed DNS lifetime RFC8106 compliant;
*) ipv6 - do not generate LL addresses for VPN interfaces when IPv6 is disabled;
*) ipv6 - do not use invalid/disabled global addresses for IPv6 ND;
*) ipv6 - fixed system stability when adding/removing IPv6 address;
*) ipv6 - added "ra-preference" parameter support for RA;
*) ipv6 - fixed dynamic non link-local addresses displaying;
*) ipv6 - removed bogus commands from IPv6 neighbors menu;
*) ipv6 - do not add duplicate dynamic prefix when static already exists;
*) ipv6 - fixed "retransmissit-interval" unit value;
*) ipv6 - fixed VLAN tagged PPPoE packet receiving on RB5009;
!) support for IPv6 NAT;
!) completely new IPv6 stack;
!) support for IPv6 ECMP and VRF (including VRF-lite);
!) support for IPv6 recursive routing and policy routing;

Perhaps many of these fixes are due to "completely new IPv6 stack;". What does the latter imply practically? Would love to learn about your experience.
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: How do I make IPv6 work?

Fri May 26, 2023 8:57 am

IPv6 configuration on MikroTik is actually too simple and minimalistic for my taste. No RA-Guard for example. No explicit ALG configuration for NAT66/NPTv6 use-cases, even though I hate both.

But the OP needs to first learn to walk, before trying to run. Meaning OP, start by learning IPv6 fundamentals.
 
wiseroute
Member
Member
Posts: 352
Joined: Sun Feb 05, 2023 11:06 am

Re: How do I make IPv6 work?

Fri May 26, 2023 12:58 pm

[*]
NAT66/NPTv6
[*]

why would its (ipv6) development need to build that? won't it against its own development spirit - which is every device will have its own ip and reducing the router numbers? 🤔 (read : to overcome ipv4 exhaustion).
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: How do I make IPv6 work?

Fri May 26, 2023 1:17 pm

NAT66: probably requested by those who are used to the NAT perspective on IPv4 who can't understand what IPv6 was studied for...

NPTv6: required by those (business users) who do not have their own AS,
but have multiple lines for their offices and want to keep the internal IPv6 configuration if one of the multiple IPv6 WANs goes down,
or, if the provider is changed, is not requested the change of internal IPv6 addresses.

So, NAT66 or NPTv6 is not required for normal end users.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7038
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: How do I make IPv6 work?

Fri May 26, 2023 1:17 pm

Because crowd demands
 
complex1
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Wed Jan 04, 2017 9:55 pm
Location: NL-NH

Re: How do I make IPv6 work?

Fri May 26, 2023 2:00 pm

@xyuri

These settings I use for ipv6
# may/26/2023 12:40:40 by RouterOS 7.9.1
# model = RB4011iGS+5HacQ2HnD

/ipv6 dhcp-client
add add-default-route=yes interface=ether1 pool-name=provider-ipv6 prefix-hint=::/56 request=prefix use-peer-dns=no

/ipv6 address
add address=::764d:xxff:fe4a:xxxx eui-64=yes from-pool=provider-ipv6 interface=home

/ipv6 nd
set [ find default=yes ] disabled=yes
add hop-limit=64 interface=home other-configuration=yes ra-interval=3s-1m

/ipv6 settings
set max-neighbor-entries=8192
 
wiseroute
Member
Member
Posts: 352
Joined: Sun Feb 05, 2023 11:06 am

Re: How do I make IPv6 work?

Fri May 26, 2023 2:24 pm

@ mrz @ rextended : interesting 🤔

but firstable, @xyuri

i am sorry I didn't mean to hijack your post - but rather i would like to elevate your post title *how can i enable ipv6* to a new perspective 👍🏻

back to @mrz,

supposed you were right, but won't that lead us back to the old ipv4 mind set? 🤔

@rextended,
[*]
if the provider is changed, is not requested the change of internal IPv6 addresses
[*]
yes. this is exactly what has been holding ipv6 first deployment spirit. even though there are similar scope for ipv4 private address. but back then, this *private ipv6* can go nowhere but local --> and now nat66/npt6.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: How do I make IPv6 work?

Fri May 26, 2023 2:30 pm

The problem is that these protocols often seem to have been studied by those who don't work there.
If each company had its own public pool, independent of the ISP/AS, the route table, which currently has ~1,000,000 just for IPv4,
would become so gigantic that it would be unmanageable...
Therefore, if the company changes provider, it cannot keep the IPv6s, but would be forced to exchange them everywhere.
That's why NPTv6...
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: How do I make IPv6 work?

Fri May 26, 2023 2:48 pm

Detailed and easy to understand steps to solve this problem. Thank you for sharing your answer
If that's detailed enough for you, maybe you can make it detailed enough for me? How do I make the router receive IPv6 address to redistribute it internally? Or no further steps are required? It just receives and redistributes it after installing and enabling the ipv6 package?
It (partly) depends on your ISP. There are different ways of handling IPv6 and some ISPs do not understand it and give you only 1 subnet, meaning you cannot redistribute it internally.
Look in your ISP documentation (probably via their webpage) to see what techniques they use and what kind of IPv6 range they assign to you (/64, /60, /56, /48).
 
User avatar
own3r1138
Long time Member
Long time Member
Posts: 680
Joined: Sun Feb 14, 2021 12:33 am
Location: Pleiades
Contact:

Re: How do I make IPv6 work?

Fri May 26, 2023 3:30 pm

You do not have the required permissions to view the files attached to this post.
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: How do I make IPv6 work?

Fri May 26, 2023 5:44 pm

You need NAT66 because people are stupid. Azure only gives you /128 for example, AWS/GCP/Whatever cloud provider doesn't give you sufficient routed prefix per instance (at least /64 or larger).

That's how NAT66 became mandatory. Then you have stupid ISPs delegating /128 prefix or /65 (not /64) or smaller.

A lot of the self-proclaimed network engineering experts believe IPv6 has run out, and we need to “Save” it by using NAT66.

NPTv6 as already explained by someone else is perfectly valid for PA address space. But also it's a clean hack for dynamic PD in home users. Dynamic PD is also just as dumb.
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: How do I make IPv6 work?

Fri May 26, 2023 5:53 pm

If each company had its own public pool, independent of the ISP/AS, the route table, which currently has ~1,000,000 just for IPv4,
would become so gigantic that it would be unmanageable...
This is no problem if every company and engineer learnt route aggregation:
https://www.juniper.net/documentation/u ... ation.html

Even IPv4 can be largely aggregated.
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 3169
Joined: Sun May 01, 2016 7:12 pm
Location: California

Re: How do I make IPv6 work?

Fri May 26, 2023 6:32 pm

Because crowd demands
Let them eat CAKE.

But the crowd demands 464XLAT too!
viewtopic.php?t=155791?
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: How do I make IPv6 work?

Fri May 26, 2023 7:45 pm

This is no problem if every company and engineer learnt route aggregation:
I collide with everyday reality, which unfortunately is not the ideal case... :(
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: How do I make IPv6 work?

Sat May 27, 2023 8:30 pm

But the crowd demands 464XLAT too!
viewtopic.php?t=155791?
I'm still waiting for MAP-T support on MikroTik, end-to-end. If they don't support it soon, me and many other operators out there will simply move to other vendors that support MAP-T.

https://www.ripe.net/participate/meetin ... -and-map-t
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: How do I make IPv6 work?

Sat May 27, 2023 8:32 pm

I collide with everyday reality, which unfortunately is not the ideal case... :(
I've said it before. Mental illness that plagues reality is not my day-care job. I can only point everyone to facts, info and standards. Whether they have the mental health to implement route aggregation or not, is outside my domain.

Who is online

Users browsing this forum: Google [Bot], sokalsondha and 42 guests