/ip dhcp-server> export
# oct/23/2014 09:49:28 by RouterOS 6.19
# software id = NWP1-5CXD
#
/ip dhcp-server
add address-pool=default-dhcp authoritative=yes disabled=no interface=\
bridge-local name=default
add address-pool=Guest-pool authoritative=yes disabled=no interface=\
bridge-guest lease-time=1h name=Guest
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=\
192.168.88.1 gateway=192.168.88.1 netmask=24
add address=192.168.89.0/24 dns-server=192.168.89.1 gateway=192.168.89.1 \
netmask=24
C:\Users\Ângela>nslookup facebook.com
Servidor: UnKnown
Address: 192.168.234.17
Não é resposta autoritativa:
Nome: facebook.com
Addresses: 2a03:2880:2130:cf05:face:b00c:0:1
173.252.120.6
C:\Users\Ângela>tracert facebook.com
Rastreando a rota para facebook.com [173.252.120.6]
com no máximo 30 saltos:
1 1 ms 1 ms 1 ms 192.168.234.17
2 2 ms 1 ms 1 ms 200.214.148.224
3 * * * Esgotado o tempo limite do pedido.
4 29 ms 36 ms 28 ms 200.216.88.2
5 39 ms 51 ms 41 ms 200.223.41.53
6 38 ms 38 ms 57 ms so-0-1-0.0-gua-sp-rotn-j01.telemar.net.br [200.1
64.197.213]
7 41 ms 42 ms 41 ms pos2-0-0-ptt-sp-rotb-01.telemar.net.br [200.223.
254.166]
8 40 ms 41 ms 41 ms ae6.br01.gru1.tfbnw.net [103.4.96.86]
9 160 ms 159 ms 159 ms ae12.bb01.mia1.tfbnw.net [31.13.26.8]
10 184 ms 185 ms 184 ms ae14.bb02.atl1.tfbnw.net [31.13.29.74]
11 195 ms 193 ms 196 ms ae15.bb03.frc3.tfbnw.net [31.13.27.120]
12 210 ms 200 ms 201 ms ae1.dr09.frc3.tfbnw.net [31.13.29.43]
13 * * * Esgotado o tempo limite do pedido.
14 * * * Esgotado o tempo limite do pedido.
15 * * * Esgotado o tempo limite do pedido.
16 197 ms 199 ms 196 ms edge-star-shv-12-frc3.facebook.com [173.252.120.
6]
Rastreamento concluído.
C:\Users\Ângela>
I believe that the DNS servers being configured by the clients are coming from the DHCP response they get from the MikroTik. There are no other DHCP servers on the network, nor is anything else advertising IPv6 that I know of.and who/what is advertising IPv6 in your network?
Anyway, DNS advertising is not on by default in RouterOS. You have to head over to /ipv6 nd to set it to be included in the RA. Also, ipv6 DHCP is not capable to do that if ipv6 package is disabled as there are nothing ipv6 related underneath that would allow DHCP server to bind and send out MLD packets.
This does not explain why my DHCP client on the PC picks up a IPv6 DNC address from the MikroTik DHCP Server when IPv6 is disabled on the MikroTik. Since it is disabled on the MikroTik, the router will not pass IPv6 packets and any attempt to use such a DNS server will timeout and fail.Some servers like google and probably facebook have implemented ipv6 so you will see an ipv6 address if your PC has got ipv6 enabled. This has nothing to do with mikrotik and is something your PC already supports and uses where possible.
I do not see any IPv6 addresses assigned to the MikroTik when I scan via winbox. I do clear the cache on the PC and disable the adapter and renable it. I still then get the two IPv6 DNS Servers showing up for that adapter. I'm willing to accept that they might not be from the MikroTik. I guess I need to figure out where else they are coming from.at times windows uses the last known working configuration on the network so even without a DHCP server it will still use the same settings on the same network. At one point you had ipv6 on mikrotik so the client shows that whenever it connects. The DHCP server only gives out details, it doesnt control what happens after. Clear your client cache and settings.
open winbox and search for your routerboard. If you dont see an ipv6 address from it that means that ipv6 isnt running on it and your client settings need to be cleared. If you do see it than it is a routerOS bug.
If I use ipconfig /all I see no other IPv6 addresses (other than the link local fe80: type). I agree with your assessment. What I observe is that after I reset things it often takes a while for the first DNS query to be successful because the IPv6 entries time out. I noticed this when I used nslookup once and saw those entries.@ddejager: What about the second question? If you run ipconfig /all, do you see any IPv6 addresses?
You have two different problems here:
1) IPv6 DNS servers addresses
This alone should not matter at all. If system does not have any IPv6 address, it won't use those servers. It can try, but as there is no route to them, it will fail immediately and move to using some reachable IPv4 DNS server.
I tried it, I manually added two IPv6 DNS servers to system without IPv6 addresses and even though nslookup tries to use one of them, the failure is instant.
2) Clients trying to connect to IPv6 addresses
Unless your client is haunted or something , it simply can't happen. If system does not have any IPv6 address, no correctly written program will get IPv6 address from hostname, unless it specifically asks for IPv6. But even if it did, the result would be exactly the same as in 1). No IPv6 route => instant failure => no slowdown.
The output of the above netsh command for the wireless interface that is in use when this DNS is configured is:Yep, it helps a little. There is indeed default route and I verified here that it's set by Teredo.
It still does not explain, where those IPv6 DNS servers come from. I'm not completely sure, but I think that Teredo can't set them. Even if it could, it would be strange, because the address of your Teredo server (5ef5:79fd => 94.245.121.253) belongs to Microsoft, while DNS addresses belong (as you already know) to Comcast.
You could disable Teredo, but it's not a solution, just a workaround. But I just found this nice command and it should show something interesting:
netsh interface ipv6 show dnsserver
Microsoft Windows [versão 6.3.9600]
(c) 2013 Microsoft Corporation. Todos os direitos reservados.
C:\Users\Guilherme>nslookup google.com
Servidor: UnKnown
Address: 192.168.234.17
Não é resposta autoritativa:
Nome: google.com
Addresses: 2800:3f0:4001:811::100e
173.194.119.32
173.194.119.34
173.194.119.41
173.194.119.46
173.194.119.40
173.194.119.37
173.194.119.39
173.194.119.38
173.194.119.33
173.194.119.35
173.194.119.36
Hostnames are mapped to IPv6 addresses by AAAA records in the DNS. Not all nameservers properly support queries for AAAA records.
There are two categories of bugs:
1) Nameservers which silently ignore AAAA queries. BIND 4 is notorious for this bug. This bug causes clients to wait for their AAAA query to timeout and frequently leads to the perception that "IPv6 is slow."
2) Nameservers which improperly respond to AAAA queries. It is common for a host to have an A record, but not AAAA records. When a namserver received a AAAA query, it should respond with NODATA, indicating that it does not have an AAAA record, but does have records of other type. Some nameservers are broken and return NXDOMAIN, which indicates that the server does not have records of any type for the hostname. This causes clients not to query for A records. Microsoft has a KB article about this issue. See RFC 2308 for more on NXDOMAIN -vs- NODATA.