Community discussions

MikroTik App
 
gfunkdave
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 96
Joined: Tue Jan 09, 2018 12:05 am

IPv6 over SSTP?

Fri Jan 31, 2025 11:35 pm

I have an SSTP server that I use from time to time, and I had thought IPv6 was working over it, but it appears not to be and I'm not sure what the problem is. The clients are assigned a valid IPv6 address and the router has a route in place for it. But I can't ping the router across the tunnel and I can't access IPv6 sites on the internet.
[david@RoutyMcRouterson] > /ipv6 pool print
Flags: D - DYNAMIC
Columns: NAME, PREFIX, PREFIX-LENGTH, EXPIRES-AFTER
#   NAME       PREFIX                    PREFIX-LENGTH  EXPIRES-AFTER
0 D ipv6-pool  2600:1700:7c50:3790::/60             64  47m12s   

[david@RoutyMcRouterson] /ipv6> address print
Flags: D - DYNAMIC; G - GLOBAL, L - LINK-LOCAL
Columns: ADDRESS, FROM-POOL, INTERFACE, ADVERTISE
#    ADDRESS                       FROM-POOL  INTERFACE        ADVERTISE
0  G fddc::100/64                             wireguard1       no       
1  G 2600:1700:7c50:3790::1/64     ipv6-pool  vlan-lan         yes      
2  G 2600:1700:7c50:3791::1/64     ipv6-pool  vlan-guest       yes      
3 DL fe80::bec1:da6a:de90:d3aa/64             wireguard1       no       
4 D  ::1/128                                  lo               no       
5 DL fe80::4aa9:8aff:fed0:92e3/64             vlan-guest       no       
6 DL fe80::4aa9:8aff:fed0:92e3/64             vlan-lan         no       
7 DL fe80::4aa9:8aff:fed0:92e3/64             bridge1          no       
8 DL fe80::5a60:d8ff:fe6f:4b31/64             ATTbridge        no       
9 DL fe80::5aee:eb12:f0:4b/64                 <sstp-davidvpn>  no     

[david@RoutyMcRouterson] > /ppp profile export
/ppp profile
add dns-server=10.9.0.1 interface-list=LAN local-address=10.9.0.1 name=sstp remote-address=sstp-vpn remote-ipv6-prefix-pool=ipv6-pool use-encryption=required use-mpls=no
When I connect, the client shows that its IPv6 router is fe80::4e9f:9bc1:f0:4b and that its IPv6 address is 2600:1700:7c50:3793:b9af:4cba:b4fc:b6a9/64, which is one of the /64s I get delegated in the /60 the ISP issues. But I can't access any IPv6 sites and I can't even ping the router at its fe80 link local address. Does anyone know what might be the problem?
 
gfunkdave
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 96
Joined: Tue Jan 09, 2018 12:05 am

Re: IPv6 over SSTP?

Fri Jan 31, 2025 11:39 pm

edit: never mind. It was a firewall issue.

I tried deleting the post but got HTTP 500.