IPv6 Roll Out

Afrigirl said:
The prefix for MFN is /62
Click to expand...
Thanks for the reply! I'm still struggling to get ipv6 up and running, i've tried dhcpv6 and slaac with a /62 prefix but it does not seem to get a delegation. is this enabled for everyone by default or does something need to be enabled on my account?
 
Abatis_ said:
Thanks for the reply! I'm still struggling to get ipv6 up and running, i've tried dhcpv6 and slaac with a /62 prefix but it does not seem to get a delegation. is this enabled for everyone by default or does something need to be enabled on my account?
Click to expand...
For Metrofibre is enabled for everyone. Please drop me a PM so I can check
 
What routers are known to work with afrihost ipv6?
I tried mikrotik but it was a pain
 
Fcon_Vpro said:
What routers are known to work with afrihost ipv6?
I tried mikrotik but it was a pain
Click to expand...
What caused you pain using the mikrotik for ipv6? I am interested. I am running ipv6 myself on another isp, and while there were some things to learn, once set up, it should _just_ work.
 
Tinuva said:
What caused you pain using the mikrotik for ipv6? I am interested. I am running ipv6 myself on another isp, and while there were some things to learn, once set up, it should _just_ work.
Click to expand...
I tried about 2 or 3 years ago. Think I used blunts settings from this thread.
It semi-worked but then constantly stopped working and needed a reboot.
I got frustrated and stopped using it and sold my mikrotik.
I did see some guys made progress with it but I just want plug and play.
I have the ax3 currently and while it works most of the time, there are things frustrating me about it.
 
Fcon_Vpro said:
I tried about 2 or 3 years ago. Think I used blunts settings from this thread.
It semi-worked but then constantly stopped working and needed a reboot.
I got frustrated and stopped using it and sold my mikrotik.
I did see some guys made progress with it but I just want plug and play.
I have the ax3 currently and while it works most of the time, there are things frustrating me about it.
Click to expand...
yeah back then it was rather buggy, take a look @ this post and the subsequent posts - https://mybroadband.co.za/forum/threads/ipv6-roll-out.1127458/page-53#post-32210147 - mine is working well now
[edit] I see you sold yours so this is "if you go mikrotik again"
 
blunt said:
yeah back then it was rather buggy, take a look @ this post and the subsequent posts - https://mybroadband.co.za/forum/threads/ipv6-roll-out.1127458/page-53#post-32210147 - mine is working well now
[edit] I see you sold yours so this is "if you go mikrotik again"
Click to expand...
Thanks for the info. I still have the old posts bookmarked from May 2022. But I don't think ill get a mikrotik again.
I don't have time to tinker around anymore with my priority being on family stuff. Just need plug and play.
For the most part the Huawei AX3 works well but getting any verbose logging is a mission and the dhcp leases are frustrating.
My connection has dropped twice in the last hour, all the ax3 could tell me was that it couldnt connect. Didnt give anymore info like credentials rejected, or whatever the specific error might be.

Ive logged a ticket with afrihost because there are no area outages posted.
 
Fcon_Vpro said:
Thanks for the info. I still have the old posts bookmarked from May 2022. But I don't think ill get a mikrotik again.
I don't have time to tinker around anymore with my priority being on family stuff. Just need plug and play.
For the most part the Huawei AX3 works well but getting any verbose logging is a mission and the dhcp leases are frustrating.
My connection has dropped twice in the last hour, all the ax3 could tell me was that it couldnt connect. Didnt give anymore info like credentials rejected, or whatever the specific error might be.

Ive logged a ticket with afrihost because there are no area outages posted.
Click to expand...
Please share the ticket ID.
 
Fcon_Vpro said:
What routers are known to work with afrihost ipv6?
I tried mikrotik but it was a pain
Click to expand...
My Ubiquiti EdgeRouter X is working fine via OpenServe, after scratching out the settings from various sources.
 
deesef said:
My Ubiquiti EdgeRouter X is working fine via OpenServe, after scratching out the settings from various sources.
Click to expand...

This is one of the big challenges, information on setting it up for each ISP and FNO is very scarce
 
@AfriGuy @Afrigirl How do I go about requesting static IPv6 assignment. I am on Vuma Areal and use a Mikrotik CCR router. I have IPv6 working and get a /62. I have retooled my network to IPv6 where possible. I have a number of services I use that require a static IP and firewall configuration to that static IP. {Edit} I forgot to mention I have multiple vlans as well so I break the /62 into 4x /64 to serve my purposes.

Secondly, I see many RA messages for an invalid MTU of 9000 on my wan link (every few minutes), from what I can see this is coming from upstream, seems the wrong MTU is being advertised. If it is coming from where I suspect, its an Arista device as by default Arista does flood the RA MTU (Below from Arista)
AristaFloods only RA MTU, but does respond to Router Solicitation
My Logs:

1718977432746.png
 
Last edited:
tyrons said:
@AfriGuy @Afrigirl How do I go about requesting static IPv6 assignment. I am on Vuma Areal and use a Mikrotik CCR router. I have IPv6 working and get a /62. I have retooled my network to IPv6 where possible. I have a number of services I use that require a static IP and firewall configuration to that static IP. {Edit} I forgot to mention I have multiple vlans as well so I break the /62 into 4x /64 to serve my purposes.

Secondly, I see many RA messages for an invalid MTU of 9000 on my wan link (every few minutes), from what I can see this is coming from upstream, seems the wrong MTU is being advertised. If it is coming from where I suspect, its an Arista device as by default Arista does flood the RA MTU (Below from Arista)
AristaFloods only RA MTU, but does respond to Router Solicitation
My Logs:

View attachment 1729311
Click to expand...
So I dont use a CCR but a RB3011.

I basically run, multiple IPv6 ranges.

The ISP v6 I just distribute over all the vlans I have.
Then for static "internal" ips, I run a fd00:: range. Documentation online say you should try and allocate a unique fd[xx] range, but I don't see myself ever connecting my home lan to other "sites".

So anyways, once you have done that, you know you will always have the same ip range/s for the vlans.

Next, RA will cause most operating systems to allocate 1 or more IPv6 ips.
1x random ip, that change basically every reboot.
1x static ip, that is based on the mac address of the network card.

There is one exception....Windows. For windows, you need to make a config change to disabl the random ips and let it only assign the static ip I think. I had to do this for the 1 windows VM I have. Something like https://learn.microsoft.com/en-us/a...ws-11-how-to-permanently-disable-temporary-ip but I can't remember exactly.

Then for DNS, you just create the DNS for your next static ipv6 ips. At least that is what I am doing, using Terraform to work it out for me.
 
Tinuva said:
So I dont use a CCR but a RB3011.

I basically run, multiple IPv6 ranges.

The ISP v6 I just distribute over all the vlans I have.
Then for static "internal" ips, I run a fd00:: range. Documentation online say you should try and allocate a unique fd[xx] range, but I don't see myself ever connecting my home lan to other "sites".

So anyways, once you have done that, you know you will always have the same ip range/s for the vlans.

Next, RA will cause most operating systems to allocate 1 or more IPv6 ips.
1x random ip, that change basically every reboot.
1x static ip, that is based on the mac address of the network card.

There is one exception....Windows. For windows, you need to make a config change to disabl the random ips and let it only assign the static ip I think. I had to do this for the 1 windows VM I have. Something like https://learn.microsoft.com/en-us/a...ws-11-how-to-permanently-disable-temporary-ip but I can't remember exactly.

Then for DNS, you just create the DNS for your next static ipv6 ips. At least that is what I am doing, using Terraform to work it out for me.
Click to expand...
Thanks for your reply Tinuva, Still venturing into the IPv6 territory and lots to learn, so advice is always welcome. Wish the world would come to the party now, still so many sites and systems only running IPv4 still.

I understand using the fd00 range, been using that internally already for local LAN connectivity but would prefer SLAAC to handle that from a static IPv6 prefix from Afrihost, then i just use that pool to create multiple /64 subnets for my devices (i have a few that are internet facing) some with reverse proxies etc. and to accommodate external DNS entries and split DNS in my dev environment. I am trying to limit routing changes, and dstnat / srcnat rule requirements especially in my DEV. If the Prefix is static, the pools for each vlan should remain static. I just wish my FW rules were less infuriating to setup. I agree, the local fd00 range would work for most user requirements.

In regards to the RA, this is the message my interface receives from the upstream router, I do believe I understand the principles of the multiple IPv6 IPs. It is asking to configure at a MTU of 9000, typical jumbo frame requirement for storage connectivity, but it seems Mikrotik handles it gracefully and just warns, but its a irritation when it comes to logs being flooded by the waring, I have suppressed that warning for now.
 
tyrons said:
Thanks for your reply Tinuva, Still venturing into the IPv6 territory and lots to learn, so advice is always welcome. Wish the world would come to the party now, still so many sites and systems only running IPv4 still.

I understand using the fd00 range, been using that internally already for local LAN connectivity but would prefer SLAAC to handle that from a static IPv6 prefix from Afrihost, then i just use that pool to create multiple /64 subnets for my devices (i have a few that are internet facing) some with reverse proxies etc. and to accommodate external DNS entries and split DNS in my dev environment. I am trying to limit routing changes, and dstnat / srcnat rule requirements especially in my DEV. If the Prefix is static, the pools for each vlan should remain static. I just wish my FW rules were less infuriating to setup. I agree, the local fd00 range would work for most user requirements.

In regards to the RA, this is the message my interface receives from the upstream router, I do believe I understand the principles of the multiple IPv6 IPs. It is asking to configure at a MTU of 9000, typical jumbo frame requirement for storage connectivity, but it seems Mikrotik handles it gracefully and just warns, but its a irritation when it comes to logs being flooded by the waring, I have suppressed that warning for now.
Click to expand...
@AfriFella @Afrigirl any feedback on the static ipv6 requested?
 
tyrons said:
@AfriFella @Afrigirl any feedback on the static ipv6 requested?
Click to expand...
The other option you could consider seeing as the above answer, is running a dynamic dns client for for each machine that needs to be reachable on public ipv6.

So for example, my domains are on cloudflare. You can run a cloudflare ddns client, to let it update the ipv6 ip's dns, with the proxy part disabled or enabled depending on if it is web or non-web related.

Sadly, with v6, you will run multiple ddns clients instead of a single one for v4.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter