IPv6 Roll Out

R3d3mpt10n said:
Afaik /64 is delegated to the wan interface itself and then you get a /60 to distribute via PD. Try 64?
Click to expand...
Exact same thing. Kicks me off the LAN, WAN disconnects and I have to reboot the router when it comes back on it's back to /62
 
Question for the Afrihost representatives here. How static is the prefix that has been allocated to me? I ask because I am trying to setup a wireguard VPN at home and would like to route IPv6 traffic through it. I do not think that wireguard provides for dynamic IP assignment which means I need to set the IP for each client manually in a static config file. I would prefer not to have to NAT the IPv6 addresses as that feels a bit like going against what IPv6 is all about.
 
atunguyd said:
Question for the Afrihost representatives here. How static is the prefix that has been allocated to me? I ask because I am trying to setup a wireguard VPN at home and would like to route IPv6 traffic through it. I do not think that wireguard provides for dynamic IP assignment which means I need to set the IP for each client manually in a static config file. I would prefer not to have to NAT the IPv6 addresses as that feels a bit like going against what IPv6 is all about.
Click to expand...
The dynamicness is not a problem on ipv6.

When you get your ipv6 prefix from dhcpv6, it gets added to an ipv6 pool (at least on my mikrotik).
Then for client (I have multiple vlans), each vlan the config I specify to grab a smaller /64 prefix from the bigger prefix I received on the dhcp client. I serve these to my vlans with RA (Route Advertisements).


So even my vlans have dynamic prefixes and hence ip addresses.

So how do you deal with this when you want multiple vlans at home and know static ips?
I run multiple ip ranges per vlans.
1x from the dhcp pool for internet
1x from a random fd00::/8 range for internal communication and routing.
 
To give you an idea what the above looks like.

Internet trace:
Code: 
~ % mtr r-live-cache.akamaized.net --show-ips --report-wide
Start: 2023-09-06T15:37:27+0200
HOST: bcd0745311cf                                                                                             Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- 2c0f-xxxx-xxxx--.rev.rocketnet.space (2c0f:xxxx:xxxx::)                                                   0.0%    10    1.1   1.5   0.9   2.6   0.7
  2.|-- 2c0f-f2a0-2-1--165.rev.rocketnet.space (2c0f:f2a0:2:1::165)                                               0.0%    10    2.5   4.3   2.3  19.7   5.4
  3.|-- 2c0f-f2a0-2-1--162.rev.rocketnet.space (2c0f:f2a0:2:1::162)                                               0.0%    10    2.2   2.5   2.2   2.9   0.2
  4.|-- 2c0f-f2a0-1--29.rev.rocketnet.space (2c0f:f2a0:1::29)                                                     0.0%    10   19.5  19.7  19.5  20.9   0.5
  5.|-- akamai.jinx.net.za (2001:43f8:1f0::211)                                                                   0.0%    10   20.2  22.3  20.2  39.6   6.1
  6.|-- g2600-1416-1000-0000-0000-0000-0214-b229.deploy.static.akamaitechnologies.com (2600:1416:1000::214:b229)  0.0%    10   33.0  20.4  18.8  33.0   4.5

Local lan trace. This trace is from my vlan20 to my vlan21
Code: 
~ % mtr ns1.xxxx.za.net -6 --show-ips --report-wide
Start: 2023-09-06T15:37:11+0200
HOST: bcd0745311cf                                     Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- router-vlan20-ipv6.xxxxxx.za.net (fd00:20::)      0.0%    10    1.1   1.9   0.9   8.1   2.2
  2.|-- ns1.xxxxxx.za.net (fd00:21::603a:f1ff:fe3b:8f2b)  0.0%    10    1.4   4.6   1.2  33.0  10.0

If you see xxxx it means I removed it for my own sanity.
 
Last edited:
atunguyd said:
Question for the Afrihost representatives here. How static is the prefix that has been allocated to me? I ask because I am trying to setup a wireguard VPN at home and would like to route IPv6 traffic through it. I do not think that wireguard provides for dynamic IP assignment which means I need to set the IP for each client manually in a static config file. I would prefer not to have to NAT the IPv6 addresses as that feels a bit like going against what IPv6 is all about.
Click to expand...
We offer dynamic /60 prefixes. They are dynamic but the v4 is based on the router's MAC address. If the MAC Address does not change, the prefix allocated will not change as well.
 
Tinuva said:
The dynamicness is not a problem on ipv6.

When you get your ipv6 prefix from dhcpv6, it gets added to an ipv6 pool (at least on my mikrotik).
Then for client (I have multiple vlans), each vlan the config I specify to grab a smaller /64 prefix from the bigger prefix I received on the dhcp client. I serve these to my vlans with RA (Route Advertisements).


So even my vlans have dynamic prefixes and hence ip addresses.

So how do you deal with this when you want multiple vlans at home and know static ips?
I run multiple ip ranges per vlans.
1x from the dhcp pool for internet
1x from a random fd00::/8 range for internal communication and routing.
Click to expand...
Thanks but I cannot avoid having static IP's for the Wireguard "clients" - from what I have managed to read wireguard does not really follow a server/client model - each device is both a server and a client which means that the client does not request an IP from the server. So my client needs to have an IPV6 address assigned to it in the config file I setup. I can hope that my IPv6 prefix will never change and then hand craft one in the config file or I can use fd00:: adresses and NAT these but as I said that feels wrong. Currently the assuming that prefix will not change is working I just asked here to see if anything might suddenly break.
 
Afrigirl said:
We offer dynamic /60 prefixes. They are dynamic but the v4 is based on the router's MAC address. If the MAC Address does not change, the prefix allocated will not change as well.
Click to expand...
Cool thanks that answers my question - I know my Ipv4 address is static because I pay you guys for a static IPv4- and based on your answer as long as I do not change my router my IPv6 prefix should remain static too.
 
atunguyd said:
Thanks but I cannot avoid having static IP's for the Wireguard "clients" - from what I have managed to read wireguard does not really follow a server/client model - each device is both a server and a client which means that the client does not request an IP from the server. So my client needs to have an IPV6 address assigned to it in the config file I setup. I can hope that my IPv6 prefix will never change and then hand craft one in the config file or I can use fd00:: adresses and NAT these but as I said that feels wrong. Currently the assuming that prefix will not change is working I just asked here to see if anything might suddenly break.
Click to expand...
Yeah I think you are correct, the examples for ipv6 and wireguard online is not as plenty as for ipv4.

Also, even with fd00 addresses and nat, devices prefer not to use that for internet traffic so that could be an issue too.

I would have to set this up myself and see what actually works, and then what works best.
 
Tinuva said:
Yeah I think you are correct, the examples for ipv6 and wireguard online is not as plenty as for ipv4.

Also, even with fd00 addresses and nat, devices prefer not to use that for internet traffic so that could be an issue too.

I would have to set this up myself and see what actually works, and then what works best.
Click to expand...
Thanks for the help - I am by no means an expert on IP and still trying to get my head around IPv6 - so battling to get things setup correctly on my Mikrotik router.
 
Tinuva said:
Yeah I think you are correct, the examples for ipv6 and wireguard online is not as plenty as for ipv4.

Also, even with fd00 addresses and nat, devices prefer not to use that for internet traffic so that could be an issue too.

I would have to set this up myself and see what actually works, and then what works best.
Click to expand...
Hey @Tinuva - do you mind PMing me a way to privately ask you questions about how you have setup multiple IPv6 prefixes with your mikrotik?
 
Last edited:
Please drop me a PM with your account number so I can check which POP you are connecting to. It is only the Aston Manor POP that has IPv6 activated for Vumatel services.
w1tw0lf said:
Did all the settings as needed, but not getting an ipv6. Can you confirm that it was activated?
Click to expand...
 
atunguyd said:
Hey @Tinuva - do you mind PMing me a way to privately ask you questions about how you have setup multiple IPv6 prefixes with your mikrotik?
Click to expand...
Hey why don't we rather discuss it in the mikrotik thread or even a new thread in case it can also help others. Technically it is just multiple ips per interface.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X