Skip to content

Commit 815ed0c

Browse files
committed
mikrotik ipv6-pd post
1 parent 4840239 commit 815ed0c

File tree

5 files changed

+21
-14
lines changed

5 files changed

+21
-14
lines changed

.gitignore

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
Public/
2+
public/

archetypes/default.md

+7-5
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
1-
+++
2-
date = '{{ .Date }}'
3-
draft = true
4-
title = '{{ replace .File.ContentBaseName "-" " " | title }}'
5-
+++
1+
---
2+
title: '{{ replace .File.ContentBaseName `-` ` ` | title }}'
3+
date: '{{ .Date }}'
4+
tags: [ ]
5+
author: "Kapil Agrawal"
6+
comments: false
7+
---

assets/img/favicon.ico

15 KB
Binary file not shown.

config/_default/params.toml

+2-2
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ enableSearch = true
1212
enableCodeCopy = true
1313
replyByEmail = false
1414

15-
mainSections = ["Posts"]
15+
mainSections = ["posts", "projects"]
1616
# robots = ""
1717

1818
disableImageOptimization = false
@@ -55,7 +55,7 @@ forgejoDefaultServer = "https://v8.next.forgejo.org"
5555
showViews = false
5656
showLikes = false
5757
showDateOnlyInArticle = false
58-
showDateUpdated = false
58+
showDateUpdated = true
5959
showAuthor = true
6060
#showAuthorBottom = false
6161
showHero = true

content/posts/mikrotik-ipv6.md

+10-7
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,16 @@
11
---
22
title: IPv6 prefix delegation on Mikrotik
3-
date: 2024-12-14
4-
tags: ["Networking"]
3+
date: 2025-01-01
4+
tags: ["IPv6","Networking"]
55
author: "Kapil Agrawal"
66
comments: false
77
---
8-
## RouterOS config
98

10-
```sh
9+
In this post I am sharing the relavent config bits that I needed to configure on my Mikrotik router to get an IPv6 block from my ISP using a process called as [prefix-delegation](https://blog.lacnic.net/en/introducing-dhcpv6-prefix-delegation/) The pre-requisite for prefix delegation is that (well, obviously) the ISP must support IPv6 on it's network and your router must be capable of making that request. Now the prefix size that an internet provider hands out varies from provider to provider, unfortunately. For e.g: Comcast is known to hand out a /60 where as ATT provdies a /56. My ISP which is a regional provider also hands out a /56
10+
11+
Here's what my routerOS config looks like
12+
13+
```bash
1114
# Configure interface group
1215
/interface list add comment="UPLINK to ISP" name=WAN
1316
/interface list member add comment="WAN facing interface" interface=ether1 list=WAN
@@ -18,9 +21,9 @@ comments: false
1821
# Request an IPv6 prefix over WAN interface; my ISP hands out a /56
1922
/ipv6 dhcp-client add add-default-route=yes interface=ether1 pool-name=delegation pool-prefix-length=56 prefix-hint=::/56 request=address,prefix
2023

21-
# Only accept inbound router-advertisements on the WAN interface
22-
/ipv6 firewall filter add action=drop chain=input icmp-options=134:0-255 in-interface-list=!WAN protocol=icmpv6
23-
2424
# Allow prefix delegatation on WAN interface
2525
/ipv6 firewall filter add action=accept chain=input comment="accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
26+
27+
# Only accept inbound router-advertisements on the WAN interface
28+
/ipv6 firewall filter add action=drop chain=input icmp-options=134:0-255 in-interface-list=!WAN protocol=icmpv6
2629
```

0 commit comments

Comments
 (0)