IPv6 + PPPoE + Mikrotik

Download as pdf or txt
Download as pdf or txt
You are on page 1of 4

IPv6 + PPPoE + Mikrotik

Konstantin Belykh · Follow


3 min read · Apr 30, 2018

Share

Starting today, my Internet provider has implemented IPv6, running on Dual Stack
PPPoE, so there is no point in raising an additional connection. Below is a small
guide for setting up Mikrotik, since I really couldn’t find a simple guide. At the very
end there is a TL:DR for those who don’t want to read a wall of text, but need to do
so.

First you need to enable IPv6 support in Mikrotik; to do this, connect to it


via Winbox , and open the menu Systems -> Packages . ipv6 will be visible in
the list of packages , but it is disabled by default. In order to enable it, select the
package, click on Enable and restart Mikrotik.

It should be something like this


Now for the actual setup. First, let's configure the DHCPv6 client. We connect again
via Winbox. Open the IPv6 menu , which will appear under the usual IP menu,
select DHCP Client and click on +. Next, specify the following settings:

Sample settings for the client

1. Interface - what looks at our Internet, in my case it is a pppoe client


2. Request - select a prefix
3. Pool Name - write something understandable for yourself
4. Pool Prefix Length - 64
5. Check the Use boxes Peer DNS and Add Default Route

Then we configure the Adverising prefix to the local network. To do this, open the
IPv6 -> Addresses menu and create a new entry:

Configuring IPv6 Address List

1. We write in Address - ::/64


2. From Pool - what we wrote in the Pool Name in the DHCPv6 client

3. Interface is what looks into the local network, for me it’s a bridge interface

4. Check the Advertise box

Click on Apply. The address should change to what the provider gives us. If this
does not happen, try turning off and turning on the pppoe interface.

After this, you can already surf the IPv6 Internet, but it makes sense to configure at
least some kind of Firewall.

The following list of commands is entered into the Mikrotik terminal, in Winbox it
is opened through the New Terminal menu (Instead of “PPPOE-client”, enter the
name of the interface that you look at the Internet):

/ipv6 firewall filter


add chain=input action=drop connection-state=invalid
add chain=input action=accept connection-state=established,related
in-interface=PPPOE-client
add chain=forward action=accept connection-state=established,
related in-interface=PPPOE-client out-interface=bridge-local
add chain=input action=accept protocol=icmpv6
add chain=forward action=accept protocol=icmpv6
add chain=input action=accept protocol=udp in-interface=PPPOE -
client dst-port=546
add chain=forward action=accept in-interface=bridge-local out-
interface=PPPOE-client
add chain=input action=drop

That's it, now you can try opening ipv6.google.com and enjoy life.

TL:DR

Open System → Packages. If the ipv6 package is in the list, enable it and reboot the
router.

Open IPv6 → DHCP Client and create a new entry:

1. Interface is what looks at our Internet, in my case it is a pppoe client


2. Request - select prefix

3. Pool Name - write something understandable for yourself

4. Pool Prefix Length - 64

5. Check the boxes Use Peer DNS and Add Default Route

Open IPv6 → Addresses and create a new entry:

1. We write in Address - ::/64

2. From Pool - what we wrote in the Pool Name in the DHCPv6 client

3. Interface is what looks into the local network, for me it’s a bridge interface

4. Check the Advertise box

Open Terminal and enter:

/ipv6 firewall filter


add chain=input action=drop connection-state=invalid
add chain=input action=accept connection-state=established,related
in-interface=PPPOE-client
add chain=forward action=accept connection-state=established,
related in-interface=PPPOE-client out-interface=bridge-local
add chain=input action=accept protocol=icmpv6
add chain=forward action=accept protocol=icmpv6
add chain=input action=accept protocol=udp in-interface=PPPOE -
client dst-port=546
add chain=forward action=accept in-interface=bridge-local out-
interface=PPPOE-client
add chain=input action=drop

You might also like