[AusNOG] Internode IPv6 Support

Damien Gardner Jnr rendrag at rendrag.net
Mon Oct 19 15:18:17 EST 2015


Sorry, I should have been more specific..

Routeros allows assigning IP's from a delegated prefix, but you can't
specify WHICH /64 you want on which interface.  They're done in order of
being enabled.  So say you have ::2:::1/64 on your DMZ interface, and then
disable the V6 IP to the DMZ interface to test something, and turn it back
on..  You'll then get ::3:::1/64.  Only way to get :2::1/64 back without
manually setting it is to reboot..  If like me, you don't really care too
much which /64 gets allocated to your LAN, but you DO care which gets
assigned to the DMZ, then you basically HAVE to static set it, as if there
are no hosts in the DMZ bridge at the time the pppoe connection comes up
and the v6 goes active, that interface won't get V6, and another interface
will end up with the /64 you expected on the DMZ.

Where as in cisco land, you can simply go 'address tid-ipv6-prefix
::2:0:0:0:1/64', and that *IS* the /64 that gets assigned there, from the
prefix you were delegated.


On 19 October 2015 at 15:11, Karl Auer <kauer at biplane.com.au> wrote:

> On Mon, 2015-10-19 at 14:50 +1100, Damien Gardner Jnr wrote:
> > Now bear in mind that RouterOS doesn't support prefix delegation (aka
> ipv6
> > address tid-ipv6-prefix ::1:0:0:0:1/64) quite the way that cisco do, so
> you
> > will have to then take your delegated prefix, and manually config your
> WAN,
> > LAN, DMZ, etc. (and unless I was doing something wrong, you HAVE to add
> the
> > WAN IP manually, if you actually want your 'tik to have v6 internet
> > access..)
>
> I configured my LAN(s) manually, but it was because I wanted to. To have
> the router select a prefix automatically, I could have put the pool name
> into the “From Pool” field when adding an address to the relevant inside
> interface then given the address as “::1/64″. The subnet prefix would
> then have been the first available /64 prefix from the Internode /56.
> However, this was a while ago (ROS5.22) maybe things are different now.
>
> After enabling IPv6 module on the MikroTik, I definitely did not need to
> configure anything on the WAN side manually except the DHCPv6 client and
> the rule that allowed DHCPv6 packets.
>
> Nor do I have a GUA on my outside interface. It wouldn't hurt to put one
> there, but it's not actually needed.
>
> Regards, K.
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Karl Auer (kauer at biplane.com.au)
> http://www.biplane.com.au/kauer
> http://twitter.com/kauer389
>
> GPG fingerprint: 3C41 82BE A9E7 99A1 B931 5AE7 7638 0147 2C3C 2AC4
> Old fingerprint: EC67 61E2 C2F6 EB55 884B E129 072B 0AF0 72AA 9882
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>



-- 

Damien Gardner Jnr
VK2TDG. Dip EE. GradIEAust
rendrag at rendrag.net -  http://www.rendrag.net/
--
We rode on the winds of the rising storm,
 We ran to the sounds of thunder.
We danced among the lightning bolts,
 and tore the world asunder
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20151019/c2386f36/attachment.html>


More information about the AusNOG mailing list