|
6 | 6 | <description>Recent content in Posts on netops2devops</description>
|
7 | 7 | <generator>Hugo -- gohugo.io</generator>
|
8 | 8 | <language>en</language>
|
9 |
| - <lastBuildDate>Mon, 27 May 2024 00:00:00 +0000</lastBuildDate><atom:link href="http://localhost:1313/posts/index.xml" rel="self" type="application/rss+xml" /> |
| 9 | + <lastBuildDate>Sat, 14 Dec 2024 00:00:00 +0000</lastBuildDate><atom:link href="http://localhost:1313/posts/index.xml" rel="self" type="application/rss+xml" /> |
| 10 | + <item> |
| 11 | + <title>IPv6 prefix delegation on Mikrotik</title> |
| 12 | + <link>http://localhost:1313/posts/mikrotik-ipv6/</link> |
| 13 | + <pubDate>Sat, 14 Dec 2024 00:00:00 +0000</pubDate> |
| 14 | + |
| 15 | + <guid>http://localhost:1313/posts/mikrotik-ipv6/</guid> |
| 16 | + <description>Mikrotik RouterOS config for IPv6 prefix delegation</description> |
| 17 | + <content:encoded><![CDATA[<h2 id="routeros-config">RouterOS config</h2> |
| 18 | +<div class="highlight"><div class="chroma"> |
| 19 | +<table class="lntable"><tr><td class="lntd"> |
| 20 | +<pre tabindex="0" class="chroma"><code><span class="lnt"> 1 |
| 21 | +</span><span class="lnt"> 2 |
| 22 | +</span><span class="lnt"> 3 |
| 23 | +</span><span class="lnt"> 4 |
| 24 | +</span><span class="lnt"> 5 |
| 25 | +</span><span class="lnt"> 6 |
| 26 | +</span><span class="lnt"> 7 |
| 27 | +</span><span class="lnt"> 8 |
| 28 | +</span><span class="lnt"> 9 |
| 29 | +</span><span class="lnt">10 |
| 30 | +</span><span class="lnt">11 |
| 31 | +</span><span class="lnt">12 |
| 32 | +</span><span class="lnt">13 |
| 33 | +</span><span class="lnt">14 |
| 34 | +</span><span class="lnt">15 |
| 35 | +</span></code></pre></td> |
| 36 | +<td class="lntd"> |
| 37 | +<pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl"><span class="c1"># Configure interface group</span> |
| 38 | +</span></span><span class="line"><span class="cl">/interface list add <span class="nv">comment</span><span class="o">=</span><span class="s2">"UPLINK to ISP"</span> <span class="nv">name</span><span class="o">=</span>WAN |
| 39 | +</span></span><span class="line"><span class="cl">/interface list member add <span class="nv">comment</span><span class="o">=</span><span class="s2">"WAN facing interface"</span> <span class="nv">interface</span><span class="o">=</span>ether1 <span class="nv">list</span><span class="o">=</span>WAN |
| 40 | +</span></span><span class="line"><span class="cl"> |
| 41 | +</span></span><span class="line"><span class="cl"><span class="c1"># Enable router-advertisement incoming from the ISP</span> |
| 42 | +</span></span><span class="line"><span class="cl">/ipv6 settings <span class="nb">set</span> accept-router-advertisements<span class="o">=</span>yes |
| 43 | +</span></span><span class="line"><span class="cl"> |
| 44 | +</span></span><span class="line"><span class="cl"><span class="c1"># Request an IPv6 prefix over WAN interface; my ISP hands out a /56</span> |
| 45 | +</span></span><span class="line"><span class="cl">/ipv6 dhcp-client add add-default-route<span class="o">=</span>yes <span class="nv">interface</span><span class="o">=</span>ether1 pool-name<span class="o">=</span>delegation pool-prefix-length<span class="o">=</span><span class="m">56</span> prefix-hint<span class="o">=</span>::/56 <span class="nv">request</span><span class="o">=</span>address,prefix |
| 46 | +</span></span><span class="line"><span class="cl"> |
| 47 | +</span></span><span class="line"><span class="cl"><span class="c1"># Only accept inbound router-advertisements on the WAN interface</span> |
| 48 | +</span></span><span class="line"><span class="cl">/ipv6 firewall filter add <span class="nv">action</span><span class="o">=</span>drop <span class="nv">chain</span><span class="o">=</span>input icmp-options<span class="o">=</span>134:0-255 in-interface-list<span class="o">=</span>!WAN <span class="nv">protocol</span><span class="o">=</span>icmpv6 |
| 49 | +</span></span><span class="line"><span class="cl"> |
| 50 | +</span></span><span class="line"><span class="cl"><span class="c1"># Allow prefix delegatation on WAN interface</span> |
| 51 | +</span></span><span class="line"><span class="cl">/ipv6 firewall filter add <span class="nv">action</span><span class="o">=</span>accept <span class="nv">chain</span><span class="o">=</span>input <span class="nv">comment</span><span class="o">=</span><span class="s2">"accept DHCPv6-Client prefix delegation."</span> dst-port<span class="o">=</span><span class="m">546</span> <span class="nv">protocol</span><span class="o">=</span>udp src-address<span class="o">=</span>fe80::/10 |
| 52 | +</span></span></code></pre></td></tr></table> |
| 53 | +</div> |
| 54 | +</div>]]></content:encoded> |
| 55 | + </item> |
| 56 | + |
10 | 57 | <item>
|
11 | 58 | <title>Say goodbye to boilerplate code</title>
|
12 | 59 | <link>http://localhost:1313/posts/my-cookiecutter/</link>
|
|
18 | 65 | ]]></content:encoded>
|
19 | 66 | </item>
|
20 | 67 |
|
21 |
| - <item> |
22 |
| - <title>IPv6 prefix delegation on Mikrotik</title> |
23 |
| - <link>http://localhost:1313/posts/mikrotik-ipv6/</link> |
24 |
| - <pubDate>Sun, 26 May 2024 00:00:00 +0000</pubDate> |
25 |
| - |
26 |
| - <guid>http://localhost:1313/posts/mikrotik-ipv6/</guid> |
27 |
| - <description>RouterOS config to get IPv6 prefix delegation from your ISP</description> |
28 |
| - <content:encoded><![CDATA[<h2 id="config">Config</h2> |
29 |
| -]]></content:encoded> |
30 |
| - </item> |
31 |
| - |
32 | 68 | <item>
|
33 | 69 | <title>My development environment</title>
|
34 | 70 | <link>http://localhost:1313/posts/my-dev-env/</link>
|
|
0 commit comments