IPv6 Roll Out

@AfriNatic @Afrigirl surely someone at AH's NOC uses Mikrotik? It's the poor man's cisco..

Would be nice to have an official tried and tested guide from someone who's trained on Mikrotik (not just a tinkerer like me) there are plenty MTK users around.

ipv6pd over pppoe (openserve) would be my wish.
 
atunguyd said:
Have not tried upgrading - been reluctant as I have a lot of different settings and rules that I have put in place for various other requirements that I have (VPN, hairpin routes so that some servers I run can be accessed outside and inside from the same URL etc...). Maybe this weekend I will dedicate a day doing this. (Assuming a straight upgrade just works - I dont want to take the chance and end up taking it all down).
Click to expand...
be sure to do an /export in terminal and save that output first

could do a clean wipe, upgrade to 7.6 and then run each of the /export'd commands in terminal section by section to see which ones are the problem

anyway, just a suggestion if you weren't already planning on doing so
 
blunt said:
be sure to do an /export in terminal and save that output first

could do a clean wipe, upgrade to 7.6 and then run each of the /export'd commands in terminal section by section to see which ones are the problem

anyway, just a suggestion if you weren't already planning on doing so
Click to expand...
Yeah thanks - that was my intended mechanism - to be honest in the 5+ years I have been running this mikrotik I have never upgraded the firmware or reset it settings simply because it "just worked" so I have never tried starting from scratch again - might just give it a go this weekend. And break out the old tplink router as a backup incase I screw everything up.
 
blunt said:
@AfriNatic @Afrigirl surely someone at AH's NOC uses Mikrotik? It's the poor man's cisco..

Would be nice to have an official tried and tested guide from someone who's trained on Mikrotik (not just a tinkerer like me) there are plenty MTK users around.

ipv6pd over pppoe (openserve) would be my wish.
Click to expand...
Back in July AfriNatic did say he was going to source a mikrotik and play around with it. I am thinking either he didn't or he realised that that are no where as user friendly as your off the shelf Netgear or TPlink home router. They really give you the ability to do anything but at the cost of complexity.
 
atunguyd said:
Back in July AfriNatic did say he was going to source a mikrotik and play around with it. I am thinking either he didn't or he realised that that are no where as user friendly as your off the shelf Netgear or TPlink home router. They really give you the ability to do anything but at the cost of complexity.
Click to expand...
indeed, i tried an edgerouterx and going back to a regular router but both pale in comparison to what you can do with mikrotik. was very disappointed in the edgerouterx, more complicated than the mikrotik in my opinion (to do "non standard" things) and more painful to configure.

things like custom routing for vpn's (along with vpn server and clients) and dns forwarding are simple to do without having to run a seperate server. i see the new mikrotiks can run containers too.
 
So i removed all the IPV6 settings from my mikrotik router and tried setting it up again from scratch and it is completely broken now - I am doing like blunt did and disabling IPV6 and just relying on IPV4. Looks like afrihost does not support higher end routers.
 
An update to this. After upgrading to routerOS 7.6 and reconfiguring everything I was still running into problems.

Then I decided to dig a little deeper and perform some basic debugging directly on the mikrotik - no problems there could ping and traceroute to addresses like 2600:: just fine.
Then tried the same on my PC - all good. Then went back to https://test-ipv6.com/ and it gave the same errors.
I then tried https://ipv6-test.com/ and it is fine. As is googles more simple website to test IPv6.

SO it looks like there may not be a problem with my installation at all or Afrihost but rather the silly https://test-ipv6.com/ website.

So this brought me back to the reason I opened this can of worms in the first place. I had noticed that my sonarr installation was no longer working with nzbfinder.ws as an indexer if I had IPv6 enabled. Investigating further I see that the name server is returning an ip address of 2001:41d0:0306:119d:0000:0000:0000:0000 for nzbfinder.ws - that looks completely wrong to me but hoping to ask the experts here. Could me original issue just be an incorrectly configured AAAA record for nzbfinder.ws that is outside of my (and afrihost's) control?

Or is anyone else able to ping that IP address?
 
atunguyd said:
An update to this. After upgrading to routerOS 7.6 and reconfiguring everything I was still running into problems.

Then I decided to dig a little deeper and perform some basic debugging directly on the mikrotik - no problems there could ping and traceroute to addresses like 2600:: just fine.
Then tried the same on my PC - all good. Then went back to https://test-ipv6.com/ and it gave the same errors.
I then tried https://ipv6-test.com/ and it is fine. As is googles more simple website to test IPv6.

SO it looks like there may not be a problem with my installation at all or Afrihost but rather the silly https://test-ipv6.com/ website.

So this brought me back to the reason I opened this can of worms in the first place. I had noticed that my sonarr installation was no longer working with nzbfinder.ws as an indexer if I had IPv6 enabled. Investigating further I see that the name server is returning an ip address of 2001:41d0:0306:119d:0000:0000:0000:0000 for nzbfinder.ws - that looks completely wrong to me but hoping to ask the experts here. Could me original issue just be an incorrectly configured AAAA record for nzbfinder.ws that is outside of my (and afrihost's) control?

Or is anyone else able to ping that IP address?
Click to expand...
Is your ipv6 setup any different to the one in my Pastebin?
 
blunt said:
Is your ipv6 setup any different to the one in my Pastebin?
Click to expand...
Just changed it to not use the cloudflare DNS and keep Afrihosts DNs - other wise the same (my own external interface name of course)
 
Just to add - I think the nzbfinder.ws address is ok - if I try to ping it using the website http://www.ipv6now.com.au/pingme.php and entering 2001:41d0:306:119d:: it works just fine. But from my side a traceroute to that address gives me this:
Code: 
Tracing route to mail.nzbfinder.ws [2001:41d0:306:119d::]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  2c0f:f4c0:b166:9560::1
  2     *        *        *     Request timed out.
  3     4 ms     5 ms     3 ms  2c0f:f4c0:3000:12::1
  4     3 ms     2 ms     2 ms  2c0f:f4c0:3000:10::2
  5     5 ms     1 ms     2 ms  2c0f:f4c0:3000:3::29
  6     3 ms     2 ms     2 ms  2c0f:f4c0:3000:3::9
  7     3 ms     3 ms     2 ms  2a01:410:1:1:46:17:239:46
  8     5 ms     4 ms     4 ms  2001:42a8::41:171:133:44
  9    10 ms    10 ms     9 ms  2001:42a8::41:171:132:67
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18     *        *        *     Request timed out.
 19     *        *        *     Request timed out.
 20     *        *        *     Request timed out.
 21     *        *        *     Request timed out.
 22     *        *        *     Request timed out.
 23     *        *        *     Request timed out.
 24     *        *        *     Request timed out.
 25     *        *        *     Request timed out.
 26     *        *        *     Request timed out.
 27     *        *        *     Request timed out.
 28     *        *        *     Request timed out.
 29     *        *        *     Request timed out.
 30     *        *        *     Request timed out.

SO it looks to me like something is getting lost on the afrihost routing side? Or am I wrong here?
 
Can someone pls assist with getting IPv6 running on a DWR-956M on Openserve?
 
jaqkar said:
Has anyone successfully configured IPv6 with pfSense and Openserv?
Click to expand...
I got it working for pfSense and frogfoot. Basically just enabled ipv6 in the settings and chose DHCPv6 in the interface. Had to wait like 2 days though to get a ip...
 
Sousie said:
I got it working for pfSense and frogfoot. Basically just enabled ipv6 in the settings and chose DHCPv6 in the interface. Had to wait like 2 days though to get a ip...
Click to expand...
I got assigned bogon IPs :/

Screenshot 2022-11-03 at 06.55.37.png
 
Sousie said:
That seems about right, the gateway ip seems correct, the DNS ipv6 also. I also get a fe80... on my gateway, then my devices get a valid ipv6 starting with 2c0f:.
Click to expand...

My devices also get IPv6 addresses but using that test website and ping6 doesn't work :/
 
i re-enabled v6 on my mikrotik using my previous settings now it just sits on searching for a prefix
 
Strange - on my mikrotik looking at the DNS settings i see that the dynamic servers that have been allocated to me are 2c0f:f4c0:30000::000d and 2c0f:f4c0:30000::000a so different to the ones you guys are gettign above. For the record that IPV6 testign website also fails for me but only to contacting IPV6 sites. As I stated above I can ping some sites but not others and a tractert shows things going missing on the ISP side (or just after it).
 
Very strange :/

IPv6 has been around forever yet ISPs still can't get it reliably implemented
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X