Community discussions

MikroTik App
  4. RouterOS
  5. General

IPsec mode-config with IPv6 address pool

Post Reply
 
crosswind
newbie
Topic Author
Posts: 46
Joined: Tue Feb 18, 2020 3:47 pm

IPsec mode-config with IPv6 address pool

Sun May 03, 2020 6:38 pm

hello,

i'm following this guide to configure ROS 6.46.4 as an IKEv2 responder for road warrior clients: https://wiki.mikrotik.com/wiki/Manual:I ... entication

but i can't find a way to assign an IPv6 address pool for the initiator addresses:
Code: Select all
[admin@cr1.cha] /ip ipsec mode-config> /ipv6 pool print                                                                       
Flags: D - dynamic 
 #   NAME                                                PREFIX                                      PREFIX-LENGTH EXPIRES-AFTER       
 0   remote-access                                       2a02:390:84de:15::/64                                  64
[admin@cr1.cha] /ip ipsec mode-config> add address-pool=remote-access address-prefix-length=128 name=remote-access            
input does not match any value of address-pool
[admin@cr1.cha] /ip ipsec mode-config>
is there a different way to assign initiator IPs for IPv6?
Top
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 10898
Joined: Mon Dec 04, 2017 9:19 pm

Re: IPsec mode-config with IPv6 address pool

Sun May 03, 2020 10:58 pm

I'm afraid there is currently (6.45.8) no way to use mode-config with IPv6. You cannot set an IPv6 address even as address, let alone address-pool. Let the RouterOS embedded help speak:

[me@MyTik] > ip ipsec mode-config add address=?

Address ::= A.B.C.D (IP address)

as compared to

[me@MyTik] > ip ipsec policy add dst-address=?

DstAddress ::= Prefix6 | Prefix4
Prefix4 ::= A.B.C.D/M (IP prefix)
Prefix6 ::= IPv6/0..128 (IPv6 prefix)
Top
 
Rjevski
just joined
Posts: 7
Joined: Sat Sep 09, 2023 2:32 pm

Re: IPsec mode-config with IPv6 address pool

Sat Sep 09, 2023 2:35 pm

Has there been any updates on this? I'm on ROS 7.10.2 and still experiencing this issue.

Does anyone know if it's possible at all to use a Mikrotik router as an IPSec IKEv2 server in a road-warrior scenario (with Windows, Mac, iOS clients) with dual-stack or IPv6-only access?
Top
 
Nightowl82
newbie
Posts: 27
Joined: Fri Feb 09, 2024 9:52 pm

Re: IPsec mode-config with IPv6 address pool

Fri Feb 09, 2024 10:16 pm

We are struggeling with the same question.

viewtopic.php?t=204321

Any updates on this?
Last edited by Nightowl82 on Fri Feb 09, 2024 10:35 pm, edited 1 time in total.
Top
 
flydvorkin
just joined
Posts: 16
Joined: Mon Mar 11, 2019 12:59 pm

Re: IPsec mode-config with IPv6 address pool

Fri Sep 27, 2024 3:47 pm

it's already 7.16, but the mode-config still doesn't have the ability IPv6
Top
Post Reply

Who is online

Users browsing this forum: almdandi, JoniuX and 71 guests
  4. RouterOS
  5. General