Does anyone have a working configuration for GRE6 they can share?
Yours hopefully...
In communication with my reseller, the ever-helpful Mike Everest at Duxtel (http://www.duxtel.com.au - recommended!), the following popped back from Mikrotik:Does anyone have a working configuration for GRE6 they can share?
And of course I was using link local addresses. Sigh.Currently you cannot make tunnel to link local addresses. local and remote address should be global. We will fix this problem in the future.
/interface gre6 add name=gre6_1 local-address=2001:db8:100::1 remote-address=2001:db8:100::2 keepalive=10
/ipv6 address add address=2001:db8:100::1/126 interface=ether5
/ipv6 address add address=2001:db8:100::5/126 interface=gre6_1
/interface gre6 add name=gre6_1 local-address=2001:db8:100::2 remote-address=2001:db8:100::1 keepalive=10
/ipv6 address add address=2001:db8:100::2/126 interface=ether1
/ipv6 address add address=2001:db8:100::6/126 interface=gre6_1
HOWEVER: The gateway shows up as "unreachable" (not in the flags, but in the detail from "ipv6 route print detail) regardless of the fact that all the IPv6 addresses involved are pingable, and that I can (eg) ssh across the tunnel. Possibly for this reason. OSPFv3 doesn't work across the tunnel.
[admin@v6test] /routing ospf-v3 interface> /ipv6 route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
...
1 ADC dst-address=fdae:adad:45d3:99::4/126 gateway=gre6_1
gateway-status=gre6_1 unreachable distance=0 scope=10
[admin@v6test] /routing ospf-v3 interface> /ping fdae:adad:45d3:99::5
HOST SIZE TTL TIME STATUS
fdae:adad:45d3:99::5 56 64 0ms echo reply
fdae:adad:45d3:99::5 56 64 0ms echo reply
sent=2 received=2 packet-loss=0% min-rtt=0ms avg-rtt=0ms max-rtt=0ms
It turned out that the interface on one of the routers DID NOT HAVE A LINK LOCAL ADDRESS. WTF?!?HOWEVER: The gateway shows up as "unreachable" (not in the flags, but in the detail from "ipv6 route print detail) regardless of the fact that all the IPv6 addresses involved are pingable, and that I can (eg) ssh across the tunnel. Possibly for this reason. OSPFv3 doesn't work across the tunnel.