MikroTik

troykelly

@archerious Did you get any answers on this - it's making our routers unusable.

The fix for (horrific IPv6 issues) on RouterOS was to disable and re-enable all IPv6 addresses at startup - but that doesn't seem to resolve this specific issue.

troykelly

I'm trying to redistribute routes to our internal devices - but as the routes are all marked as unreachable they are not being advertised. 41404 Db dst-address=2c0f:fd90::/32 gateway=2001:19f0:ffff::1 gateway-status=2001:19f0:ffff::1 unreachable distance=20 scope=40 target-scope=30 bgp-as-path="...

troykelly

Yes, after considerable finger pointing from Mikrotik - it turned out to be an issue with their implementation. Now that the current firmware (the RC at least) has the fix - there are no problems with IPv6 in this situation. HOWEVER - It should be noted that Vultr IPv6 is blacklisted at Google (Thei...

troykelly

if you just want to suppress this advertisement - do it using a route-filter.

I need the advertisement, just not every five seconds

Sent from my SM-G925V using Tapatalk

troykelly

We have a problem that we are being throttled off / kicked off from our upstream BGP Peers because of the below. I'm not sure what is causing it - but every couple of seconds the router is advertising the same route. For the sake of this issue - you can ignore the strange next-hop, and file exists i...

troykelly

While version 3.8 of WinBox seems to run just fine, it doesn't seem to exit as gracefully as 3.7 as it leaves a Winbox session hanging in the menu bar. Exiting or quitting the app, same results.

This seems to be occurring for Winbox 3.8 under any Wine instance (not just commercial versions)

troykelly

Are you sure you can reproduce that a direct session between the public IP addresses of your LTE and central site is running at full speed but a VPN is running at 10% of that? Or could it also be that the LTE in fact never reaches its advertised speed when transferring data from your central site? ...

troykelly

We have several core routers housed in data centres in key cities. "Branch" offices (typically co-working spaces, some homes, mobile workers) . My plan was to have all those remote locations connect via a VPN to a core router, and tunnel their traffic over that connection. My challenge now...

troykelly

Would it be possible to get an IPv6 roadmap?

This and many other IPv6 related features seem to just get ignored.

troykelly

And you thought they didn't listen to you!

I need to find a hat to eat. I didn't think it would ever get resolved.

I'm very glad the bug was recognized and resolved - thank-you Sob & whomever at MikroTik that secretly fixed it.

troykelly

I just need to be able to get the transit router via RA with a static IPv6 address set on ether1 - and to do that I just need this bug fixed. I need a way to set accept_ra=2 which I assume should be set with accept-router-advertisements=yes Can somebody shed some light - is it just a shortcoming of ...

troykelly

I don't think so. Not with RouterOS alone. I don't know what router you use (if you have CHR just for testing or not), but if you were really desperate and your router was able to use MetaRouter, it should be possible to use it (with OpenWRT guest) as an extra virtual router between ISP and your ro...

troykelly

TL;DR summary: I can confirm what you see.

Thank-you for that - very thorough.

Are there any ideas for a work-around?

troykelly

I'd love some feedback or testing from others to dis/prove my findings. To me - it looks as though the RouterOS frontend (GUI or Terminal) is not updating accept_ra in ip-sysctl . It doesn't look like it's accept_ra_defrtr being set - because of the fact that setting accept-router-advertisements=no ...

troykelly

The IPv6 setting " accept-router-advertisements " is permanently set to " yes-if-forwarding-disabled " The setting can be changed via a terminal or in the interface (current RC added IPv6 settings GUI) - but that change is not reflected in the operation of the router. Testing on ...

troykelly

I need some advice on how to interface with Mikrotik support - I can't get a response out of them anymore - they are ignoring my emails. The issue that has been outlined here, and in my (many) emails with them has been misunderstood. To my mind - it is very simple. There is a bug in RouterOS. The IP...

troykelly

I don't know their first hop, or at least I can't see how to find it out.
It's hidden in a trace, and nothing appears in the routing table - it just 'works'
There's also nothing that appears in the neighbours table.

troykelly

I've tried asking Vultr to not use ND for routing. But they insist that there is no other way for them to do it. @proximus - The exports are in this thread. They have all the changes from default. I've confirmed several times (as have others) on clean CHR images that the issue exists. Was there some...

troykelly

It's been over a week, and I've not had a response at all from support. The forum post was made well after the initial support ticket. I think responding after one-to-two days is poor. Not responding after a week to a bug report - is something else. To return to the topic / reason for the post - Can...

troykelly

Can anybody think of a way around this? (Apart from a static IPv6 route - which Vultr don't support).

I can't use IPv6 without using ND for routing, it appears there is a routeros bug not allowing the setting to be changed, and I can't get a response out of support.

troykelly

seems to ignore first two options when set. I've just spun up another clean CHR - accept-router-advertisements can not be changed. It is permanently set to "yes-if-forwarding-disabled". Setting it to other options is reflected in the export, but the setting is not honored by the device. R...

troykelly

I think the accept-router-advertisements option is buggy Is that the consensus? I also think there is some bug / issue at play when setting forward=yes that prevents the router seeking and honouring ND routes. Can anybody think of a workaround, I can only get routes via ND - Vultr will not tell me ...

troykelly

We use BGP to advertise the /64's that we get assigned for the other subnets. I'm just confused around why the option accept-router-advertisements=yes if the router won't use ND to get it's routing path when forwarding is on. There is a specific option for this scenario "yes-if-forwarding-disab...

troykelly

IPv6 routing is mutually exclusive with address assignment using ND Is that specific to RouterOS? I'm not getting my address via ND - just the route I have CentOS boxes that get IPv6 connectivity on an interface with ND, and then route other v6 subnets to other interfaces. I'm just trying to reprod...

troykelly

When I enable forward=yes - all IPv6 stops working. The provider (Vultr) only supports IPv6 via ND. # nov/17/2016 19:01:45 by RouterOS 6.38rc25 # software id = # /ipv6 settings set accept-redirects=no accept-router-advertisements=yes forward=no max-neighbor-entries=8192 /ipv6 nd set [ find default=y...

troykelly

If you end up here trying to get IPv6 working at Vultr - from a clean build - the commands below work. The order they are issued appears to be exceptionally important. /ipv6 address add address=[[YOUR IPv6 ADDRESS] interface=ether1 /ipv6 nd set [ find default=yes ] disabled=yes add interface=ether1 ...

troykelly

I'm trying to set up three cloud routers inside Vultr. They only use ND advertisements for IPv6 and will not provide next hop information - so I am at their mercy. The configuration below worked for a few hours on one server, but after a reboot stopped. All three routers are identical (bar IPv6 addr...

troykelly

I'm also experiencing this issue - I too reached out to Amazon to be told that not a single user has complained about this issue and as they have not had any complaints - have not started work towards a resolution. Could everybody experiencing this issue please request some sort of formal acknowledg...

troykelly

posted it here a while back

Were you maybe thinking of the http://wiki.mikrotik.com/wiki/Manual:Winbox download?
The link there is to 3.0rc15 - and it's not been maintained since then.

troykelly

They already have done a Wine based app for OS X.

Cheers David, I had no idea - where's the download to the official OS X app? I can't see it at http://www.mikrotik.com/download

troykelly

Because 6.34rc42 requires Winbox 3.4 I've created an OSX version of Winbox 3.4 with WineBottler. It's available here : https://storage.googleapis.com/aicial-misc/Winbox34Install.tgz (64MB file) Note - It is not signed - you will need to allow it permission to run. It is a clean install of 3.4, but y...

troykelly

You are talking about adding IPv6 to your network and having problems with routing, but you also refer to VPN. Maybe you can explain a bit better what your requirements are. We have a VPN server - it was SoftEther, but RouterOS doesn't support that - we we are trying pure OpenVPN, which it appears ...

troykelly

It really doesn't make sense.

Has anybody got mode=ethernet working with OpenVPN?

troykelly

It would seem that Mikrotik is the wrong choice for IPv6 - but before replacing a whole bunch of routers - I thought I would check. Is there a VPN client on RouterOS that support IPv6? From my own testing: OpenVPN IP - No OpenVPN Ethernet - No SSTP - No L2TP - No L2TP/IPSec - No We are moving parts ...

troykelly

OVPN doesn't Not completely true. IPv6 may not be supported "on OpenVPN level", but if you use ethernet mode, you're free to run any protocol over it, IPv6 included. Well, if there is anybody that can get it working - I'd sure appreciate the help. I already tried Ethernet and I couldn't g...

troykelly

It is the same, most likely there will be no ipv6 support in ROS v6 for ovpn.

Is there anything on RouterOS that supports IPv6?

SSTP doesn't
OVPN doesn't
L2TP can't pass through NAT - so useless for many

..?

What would MikroTik suggest for those of us that need to use IPv6 over a VPN?

troykelly

RouterOS does not support /127 network

Thank you - but I've tried /64 as well as I said in the original message.

I can't get _any_ network to leave the "unreachable" state.

I have a suspicion that RouterOS doesn't support IPv6 on VPN connections?

troykelly

I'm trying to configure a vpn connection and route IPv6 over it. Irrespective of putting a /64 or a /127 IP address on the interface it always shows that the gateway is unreachable. I am sure I am doing something stupid, but I've spent a bunch more time on this than I should and I can't work it out....

troykelly

Is there a status page we can check?

I'd really like to know where we can turn when stuff breaks - these forums don't seem to be the place.

troykelly

I think /ip cloud might be offline again. Is there a status page we can check? ddns-enabled: yes update-time: yes public-address: a.b.c.d dns-name: aaaaaaaaaaaa.sn.mynetname.net status: Error: request timed out pub address and dns-name have been redacted - they are actual values in the output

Search found 40 matches