IPv6: Mikrotik: DHCPv6 - Revision history

Onnowpurbo at 05:31, 6 February 2019

2019-02-06T05:31:47Z

← Older revision		Revision as of 05:31, 6 February 2019
Line 219:		Line 219:
	...		...
	2 ADS 2001:db8:7501:1::/62 fe80::224:1dff:fe17:8... 1		2 ADS 2001:db8:7501:1::/62 fe80::224:1dff:fe17:8... 1








			==Pranala Menarik==

			* [[TCP/IP: Advanced Routing]]
			* [[Quagga]]
			* [[VyOS]]
			* [[Mikrotik]]
			* [[Cisco]]
			* [[Juniper]]
			* [[BIRD1]]
			* [[BIRD2]]
			* [[IPv6]]


			* [[TCP/IP: Advanced Routing]]
			* [[IPv6: Advanced Routing]]
			* [[IPv6: Quagga]]
			* [[IPv6: VyOS]]
			* [[IPv6: Mikrotik]]
			* [[IPv6: Cisco]]
			* [[IPv6: Juniper]]
			* [[IPv6: BIRD1]]
			* [[IPv6: BIRD2]]
			* [[IPv6]]

Onnowpurbo: /* Rate limiting */

2019-02-06T05:00:07Z

Rate limiting

← Older revision		Revision as of 05:00, 6 February 2019
Line 94:		Line 94:
	It is possible to set a bandwidth to a specific IPv6 address by using DHCPv6 bindings. This can be done by setting a rate limit on the DHCPv6 binding itself, by doing this a dynamic simple queue rule will be added for the IPv6 address that corresponds to the DHCPv6 binding. By using the <code>rate-limit</code> parameter you can conveniently limit a user's bandwidth.		It is possible to set a bandwidth to a specific IPv6 address by using DHCPv6 bindings. This can be done by setting a rate limit on the DHCPv6 binding itself, by doing this a dynamic simple queue rule will be added for the IPv6 address that corresponds to the DHCPv6 binding. By using the <code>rate-limit</code> parameter you can conveniently limit a user's bandwidth.

	{{ Note \| For any queues to work properly, the traffic must not be [[ Manual:IP/Fasttrack \| FastTracked]], make sure your Firewall does not FastTrack traffic that you want to limit. }}		Note \| For any queues to work properly, the traffic must not be [[ Manual:IP/Fasttrack \| FastTracked]], make sure your Firewall does not FastTrack traffic that you want to limit.

	First, make the DHCPv6 binding static, otherwise it will not be possible to set a rate limit to a DHCPv6 binding:		First, make the DHCPv6 binding static, otherwise it will not be possible to set a rate limit to a DHCPv6 binding:
	~~<pre>~~
	~~[admin@MikroTik] > /ipv6 dhcp-server binding print~~
	~~Flags: X - disabled, D - dynamic~~
	~~# ADDRESS DUID SERVER STATUS~~
	~~0 D fdb4:4de7:a3f8:418c::/66 0x6c3b6b7c413e DHCPv6_Server bound~~

	[admin@MikroTik] > /ipv6 dhcp-server binding make-static 0		[admin@MikroTik] > /ipv6 dhcp-server binding print
			Flags: X - disabled, D - dynamic
			# ADDRESS DUID SERVER STATUS
			0 D fdb4:4de7:a3f8:418c::/66 0x6c3b6b7c413e DHCPv6_Server bound

			[admin@MikroTik] > /ipv6 dhcp-server binding make-static 0

			[admin@MikroTik] > /ipv6 dhcp-server binding print
			Flags: X - disabled, D - dynamic
			# ADDRESS DUID SERVER STATUS
			0 fdb4:4de7:a3f8:418c::/66 0x6c3b6b7c413e DHCPv6_Server bound

	~~[admin@MikroTik] > /ipv6 dhcp-server~~ binding ~~print~~		Then you need can set a rate to a DHCPv6 binding that will create a new dynamic simple queue entry:
	~~Flags: X - disabled, D -~~ dynamic
	~~# ADDRESS DUID SERVER STATUS~~
	~~0 fdb4:4de7:a3f8:418c:~~:~~/66 0x6c3b6b7c413e DHCPv6_Server bound~~
	~~</pre>~~

	~~Then you need can set a rate to a DHCPv6 binding that will create a new dynamic simple queue entry:~~		[admin@MikroTik] > /ipv6 dhcp-server binding set 0 rate-limit=10M/10
	~~<pre>~~
	[admin@MikroTik] > /ipv6 dhcp-server binding set 0 rate-limit=10M/10		[admin@MikroTik] > /queue simple print
			Flags: X - disabled, I - invalid, D - dynamic
			0 D name="dhcp<6c3b6b7c413e fdb4:4de7:a3f8:418c::/66>" target=fdb4:4de7:a3f8:418c::/66 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=10M/10M max-limit=10M/10M burs t-limit=0/0 burst-threshold=0/0
			burst-time=0s/0s bucket-size=0.1/0.1

	~~[admin@MikroTik] > /queue simple print~~
	~~Flags: X - disabled, I - invalid, D - dynamic~~
	0 D name="dhcp<6c3b6b7c413e fdb4:4de7:a3f8:418c::/66>" target=fdb4:4de7:a3f8:418c::/66 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=10M/10M max-limit=10M/10M burst-limit=0/0 burst-threshold=0/0
	~~burst-time=0s/0s bucket-size=0.1/0.1~~
	~~</pre>~~

	{{ Note \| By default <code>allow-dual-stack-queue</code> is enabled, this will add a single dynamic simple queue entry for both DCHPv6 binding and DHCPv4 lease, without this option enabled separate dynamic simple queue entries will be added for IPv6 and IPv4. }}		Note \| By default <code>allow-dual-stack-queue</code> is enabled, this will add a single dynamic simple queue entry for both DCHPv6 binding and DHCPv4 lease, without this option enabled separate dynamic simple queue entries will be added for IPv6 and IPv4.

	If <code>allow-dual-stack-queue</code> is enabled, then a single dynamic simple queue entry will be created containing both IPv4 and IPv6 addresses:		If <code>allow-dual-stack-queue</code> is enabled, then a single dynamic simple queue entry will be created containing both IPv4 and IPv6 addresses:
	~~<pre>~~
	[admin@MikroTik] > /queue simple print		[admin@MikroTik] > /queue simple print
	Flags: X - disabled, I - invalid, D - dynamic		Flags: X - disabled, I - invalid, D - dynamic
	0 D name="dhcp-ds<6C:3B:6B:7C:41:3E>" target=192.168.1.200/32,fdb4:4de7:a3f8:418c::/66 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=10M/10M max-limit=10M/10M burst-limit=0/0 burst-threshold=0/0		0 D name="dhcp-ds<6C:3B:6B:7C:41:3E>" target=192.168.1.200/32,fdb4:4de7:a3f8:418c::/66 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=10M/10M max-limit=10M/10M burst- limit=0/0 burst-threshold=0/0
	burst-time=0s/0s bucket-size=0.1/0.1		burst-time=0s/0s bucket-size=0.1/0.1
	~~</pre>~~

	====RADIUS Support====		====RADIUS Support====
Line 151:		Line 150:
	</pre>		</pre>

	{{ Note \| By default <var>allow-dual-stack-queue</var> is enabled and will add a single dynamic queue entry if the MAC address from the IPv4 lease (or DUID, if the DHCPv4 Client supports <code>Node-specific Client Identifiers</code> from RFC4361), but DUID from DHCPv6 Client is not always based on the MAC address from the interface on which the DHCPv6 Client is running on, DUID is generated on per-device basis. For this reason a single dynamic queue entry might not be created, separate dynamic queue entries might be created instead. }}		Note \| By default <var>allow-dual-stack-queue</var> is enabled and will add a single dynamic queue entry if the MAC address from the IPv4 lease (or DUID, if the DHCPv4 Client supports <code>Node-specific Client Identifiers</code> from RFC4361), but DUID from DHCPv6 Client is not always based on the MAC address from the interface on which the DHCPv6 Client is running on, DUID is generated on per-device basis. For this reason a single dynamic queue entry might not be created, separate dynamic queue entries might be created instead.

	==Configuration Examples==		==Configuration Examples==

Onnowpurbo: /* Menu specific commands */

2019-02-06T04:58:21Z

Menu specific commands

← Older revision		Revision as of 04:58, 6 February 2019
Line 88:		Line 88:
	===Menu specific commands===		===Menu specific commands===

	~~{{Mr-arg-table-h~~		make-static () Set dynamic binding as static.
	~~\|prop=Property~~
	~~\|desc=Description~~
	}}

	~~{{Mr-arg-ro-table-end~~
	~~\|arg=~~make-static
	~~\|type=~~
	~~\|desc=~~Set dynamic binding as static.
	}}

	===Rate limiting===		===Rate limiting===

Onnowpurbo: /* Bindings */

2019-02-06T04:57:43Z

Bindings

Show changes

Onnowpurbo: /* General */

2019-02-06T04:53:49Z

General

@@ Line 39: / Line 39: @@
 '''Read-only Properties'''
-{{Mr-arg-table-h
+* dynamic (yes | no)
-|prop=Property
+* invalid (yes | no)
 ==Bindings==

Onnowpurbo: /* General */

2019-02-06T04:53:12Z

General

@@ Line 15: / Line 15: @@
 ==General==
-<p id="shbox"><b>Sub-menu:</b> <code>/ipv6 dhcp-server</code></p>
 This sub menu lists and allows to configure DHCP-PD servers.
@@ Line 21: / Line 22: @@
 '''Properties'''
-{{Mr-arg-table-h
+* address-pool (enum | static-only; Default: static-only)
-|prop=Property
+* authoritative (after-10sec-delay | after-2sec-delay | yes | no; Default: after-2sec-delay)
-|desc=Description
+* binding-script (string; Default: )
-}}
+** bindingBound - set to "1" if bound, otherwise set to "0"
+** bindingServerName - dhcp server name
-{{Mr-arg-table
+** bindingDUID - DUID
-|arg=address-pool
+** bindingAddress - active address
-|type=enum {{!}} static-only
+** bindingPrefix - active prefix
-|default=static-only
+* delay-threshold (time | none; Default: none)
-|desc=[[M:IPv6/Pool | IPv6 pool]], from which to take IPv6 prefix for the clients.
+* disabled (yes | no; Default: no)
-}}
+* interface (string; Default: )
+* lease-time (time; Default: 3d)
-{{Mr-arg-table
+* name (string; Default: )

Onnowpurbo at 03:21, 6 February 2019

2019-02-06T03:21:28Z

← Older revision		Revision as of 03:21, 6 February 2019
Line 1:		Line 1:
	~~{{Versions\|v5.9+}}~~


	==Summary==		==Summary==

	~~<p id="shbox"><b>~~Standards:~~</b> <code>~~RFC 3315, RFC 3633~~</code><br />~~		Standards: RFC 3315, RFC 3633
	~~<b>~~Package:~~</b> <code>~~dhcp,ipv6~~</code>~~		Package: dhcp,ipv6
	~~</p>~~

	Starting from v5.9 DHCP-PD server is moved to /ipv6 sub menu		Starting from v5.9 DHCP-PD server is moved to /ipv6 sub menu

Onnowpurbo: Created page with "{{Versions|v5.9+}} ==Summary==
Standards: `RFC 3315, RFC 3633`
Package: `dhcp,ipv6`
Starting from v5.9 DHCP-PD..."

2019-02-06T03:20:47Z

Created page with "{{Versions|v5.9+}} ==Summary== Standards: <code>RFC 3315, RFC 3633</code> Package: <code>dhcp,ipv6</code> Starting from v5.9 DHCP-PD..."

New page

{{Versions|v5.9+}}

==Summary==

Standards: <code>RFC 3315, RFC 3633</code> 
Package: <code>dhcp,ipv6</code>


Starting from v5.9 DHCP-PD server is moved to /ipv6 sub menu

Single DUID is used for client and server identification, only IAID will vary between cients corresponding to their assigned interface.

Client binding creates dynamic pool with timeout set to binding's expiration time (note that now dynamic pools can have a timeout), which will be updated every time binding gets renewed.

When client is bound to prefix, DHCP server adds routing information to know how to reach assigned prefix.

Client bindings in server does not show MAC address anymore (as it was in v5.8), DUID (hex) and IAID are used instead. After upgrade MAC addresses will be converted to DUIDs automatically, but due to unknown DUID type and unknown IAID, they should be further updated by user;

==General==
Sub-menu: <code>/ipv6 dhcp-server</code>

This sub menu lists and allows to configure DHCP-PD servers.

'''Properties'''

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-table
|arg=address-pool
|type=enum {{!}} static-only
|default=static-only
|desc=[[M:IPv6/Pool | IPv6 pool]], from which to take IPv6 prefix for the clients.
}}

{{Mr-arg-table
|arg=authoritative
|type=after-10sec-delay {{!}} after-2sec-delay {{!}} yes {{!}} no
|default=after-2sec-delay
|desc=Whether the DHCP server is the only one DHCP server for the network:
* <var>after-10sec-delay</var> - to clients request for an address, dhcp server will wait 10 seconds and if there is another request from the client after this period of time, then dhcp server will offer the address to the client or will send DHCPNAK, if the requested address is not available from this server
* <var>after-2sec-delay</var> - to clients request for an address, dhcp server will wait 2 seconds and if there is another request from the client after this period of time, then dhcp server will offer the address to the client or will send DHCPNAK, if the requested address is not available from this server
* <var>yes</var> - to clients request for an address that is not available from this server, dhcp server will send negative acknowledgment (DHCPNAK)
* <var>no</var> - dhcp server ignores clients requests for addresses that are not available from this server
}}

{{Mr-arg-table
|arg=binding-script
|type=string
|default=
|desc=Script that will be executed after binding is assigned or de-assigned. Internal "global" variables that can be used in the script:
* <var>bindingBound</var> - set to "1" if bound, otherwise set to "0"
* <var>bindingServerName</var> - dhcp server name
* <var>bindingDUID</var> - DUID
* <var>bindingAddress</var> - active address
* <var>bindingPrefix</var> - active prefix
}}

{{Mr-arg-table
|arg=delay-threshold
|type=time {{!}} none
|default=none
|desc=If secs field in DHCP packet is smaller than delay-threshold, then this packet is ignored. If set to none - there is no threshold (all DHCP packets are processed)
}}

{{Mr-arg-table
|arg=disabled
|type=yes {{!}} no
|default=no
|desc=Whether DHCP-PD server participate in prefix assignment process.
}}

{{Mr-arg-table
|arg=interface
|type=string
|default=
|desc=Interface on which server will be running.
}}

{{Mr-arg-table
|arg=lease-time
|type=time
|default=3d
|desc=The time that a client may use the assigned address. The client will try to renew this address after a half of this time and will request a new address after time limit expires.
}}

{{Mr-arg-table-end
|arg=name
|type=string
|default=
|desc=Reference name
}}

'''Read-only Properties'''

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-ro-table
|arg=dynamic
|type=yes {{!}} no
|desc=
}}

{{Mr-arg-ro-table-end
|arg=invalid
|type=yes {{!}} no
|desc=
}}

==Bindings==

Sub-menu: <code>/ipv6 dhcp-server binding</code>

DUID is used only for dynamic bindings, so if it changes then client will receive different prefix than previously.

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-table
|arg=address
|type=IPv6 prefix
|default=
|desc=IPv6 prefix that will be assigned to the client
}}

{{Mr-arg-table
|arg=allow-dual-stack-queue
|type=yes {{!}} no
|default=yes
|desc=Creates a single simple queue entry for both IPv4 and IPv6 addresses, uses the MAC address and DUID for identification. Requires [[ Manual:IP/DHCP_Server | IPv4 DHCP Server]] to have this option enabled as well to work properly.
}}

{{Mr-arg-table
|arg=comment
|type=string
|default=
|desc=Short description of an item.
}}

{{Mr-arg-table
|arg=disabled
|type=yes {{!}} no
|default=no
|desc=Whether item is disabled
}}

{{Mr-arg-table
|arg=dhcp-option
|type=string
|default=
|desc=Add additional DHCP options from [[#Options | option list]].
}}

{{Mr-arg-table
|arg=dhcp-option-set
|type=string
|default=
|desc=Add additional set of DHCP options.
}}

{{Mr-arg-table
|arg=life-time
|type=time
|default=3d
|desc=Time period after which binding expires/
}}

{{Mr-arg-table
|arg=duid
|type= hex string
|default=
|desc=DUID value. Should be specified only in hexadecimal format.
}}

{{Mr-arg-table
|arg=iaid
|type=integer [0..4294967295]
|default=
|desc=Identity Association Identifier, part of the Client ID.
}}

{{Mr-arg-table
|arg=prefix-pool
|type=string
|default=
|desc=Prefix pool that is being advertised to the DHCPv6 Client.
}}

{{Mr-arg-table
|arg=rate-limit
|type=integer[/integer] [integer[/integer] [integer[/integer] [integer[/integer]]]]
|default=
|desc=Adds a dynamic simple queue to limit IP's bandwidth to a specified rate. Requires the lease to be static. Format is: rx-rate[/tx-rate] [rx-burst-rate[/tx-burst-rate] [rx-burst-threshold[/tx-burst-threshold] [rx-burst-time[/tx-burst-time]]]]. All rates should be numbers with optional 'k' (1,000s) or 'M' (1,000,000s). If tx-rate is not specified, rx-rate is as tx-rate too. Same goes for tx-burst-rate and tx-burst-threshold and tx-burst-time. If both rx-burst-threshold and tx-burst-threshold are not specified (but burst-rate is specified), rx-rate and tx-rate is used as burst thresholds. If both rx-burst-time and tx-burst-time are not specified, 1s is used as default.
}}

{{Mr-arg-table-end
|arg=server
|type=string {{!}} all
|default=all
|desc=Name of the server. If set to '''all''', then binding applies to all created DHCP-PD servers.
}}

'''Read-only properties'''

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-ro-table
|arg=dynamic
|type=yes {{!}} no
|desc=Whether item is dynamically created.
}}

{{Mr-arg-ro-table
|arg=expires-after
|type=time
|desc=Time period after which binding expires.
}}

{{Mr-arg-ro-table
|arg=last-seen
|type=time
|desc=Time period since client was last seen.
}}

{{Mr-arg-ro-table-end
|arg=status
|type=waiting {{!}} offered {{!}} bound
|desc=Three status vales are possible:
* '''waiting''' - Shown for static bindings if it is not used. For dynamic bindings this status is shown if it was used previously, server will wait 10 minutes to allow old client to get this binding, otherwise binding will be cleared and prefix willbe offered to other clients.
* '''offered''' - if '''solicit''' message was received, and server responded with '''advertise''' message, but '''request''' was not received. During this state client have 2 minutes to get this binding, otherwise it is freed or changed status to '''waiting''' for static bindings.
* '''bound''' - currently bound.
}}

For example, dynamically assigned /62 prefix
<pre>
[admin@RB493G] /ipv6 dhcp-server binding> print detail
Flags: X - disabled, D - dynamic
0 D address=2a02:610:7501:ff00::/62 duid="1605fcb400241d1781f7" iaid=0
server=local-dhcp life-time=3d status=bound expires-after=2d23h40m10s
last-seen=19m50s

1 D address=2a02:610:7501:ff04::/62 duid="0019d1393535" iaid=2
server=local-dhcp life-time=3d status=bound expires-after=2d23h43m47s
last-seen=16m13s

</pre>

===Menu specific commands===

{{Mr-arg-table-h
|prop=Property
|desc=Description
}}

{{Mr-arg-ro-table-end
|arg=make-static
|type=
|desc=Set dynamic binding as static.
}}

===Rate limiting===

It is possible to set a bandwidth to a specific IPv6 address by using DHCPv6 bindings. This can be done by setting a rate limit on the DHCPv6 binding itself, by doing this a dynamic simple queue rule will be added for the IPv6 address that corresponds to the DHCPv6 binding. By using the <code>rate-limit</code> parameter you can conveniently limit a user's bandwidth.

{{ Note | For any queues to work properly, the traffic must not be [[ Manual:IP/Fasttrack | FastTracked]], make sure your Firewall does not FastTrack traffic that you want to limit. }}

First, make the DHCPv6 binding static, otherwise it will not be possible to set a rate limit to a DHCPv6 binding:
<pre>
[admin@MikroTik] > /ipv6 dhcp-server binding print
Flags: X - disabled, D - dynamic
# ADDRESS DUID SERVER STATUS
0 D fdb4:4de7:a3f8:418c::/66 0x6c3b6b7c413e DHCPv6_Server bound

[admin@MikroTik] > /ipv6 dhcp-server binding make-static 0

[admin@MikroTik] > /ipv6 dhcp-server binding print
Flags: X - disabled, D - dynamic
# ADDRESS DUID SERVER STATUS
0 fdb4:4de7:a3f8:418c::/66 0x6c3b6b7c413e DHCPv6_Server bound
</pre>

Then you need can set a rate to a DHCPv6 binding that will create a new dynamic simple queue entry:
<pre>
[admin@MikroTik] > /ipv6 dhcp-server binding set 0 rate-limit=10M/10

[admin@MikroTik] > /queue simple print
Flags: X - disabled, I - invalid, D - dynamic
0 D name="dhcp<6c3b6b7c413e fdb4:4de7:a3f8:418c::/66>" target=fdb4:4de7:a3f8:418c::/66 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=10M/10M max-limit=10M/10M burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s bucket-size=0.1/0.1
</pre>

{{ Note | By default <code>allow-dual-stack-queue</code> is enabled, this will add a single dynamic simple queue entry for both DCHPv6 binding and DHCPv4 lease, without this option enabled separate dynamic simple queue entries will be added for IPv6 and IPv4. }}

If <code>allow-dual-stack-queue</code> is enabled, then a single dynamic simple queue entry will be created containing both IPv4 and IPv6 addresses:
<pre>
[admin@MikroTik] > /queue simple print
Flags: X - disabled, I - invalid, D - dynamic
0 D name="dhcp-ds<6C:3B:6B:7C:41:3E>" target=192.168.1.200/32,fdb4:4de7:a3f8:418c::/66 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=10M/10M max-limit=10M/10M burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s bucket-size=0.1/0.1
</pre>

====RADIUS Support====

Since RouterOS v6.43 it is possible to use RADIUS to assign a rate-limit per DHCPv6 binding, to do so you need to pass the <var>Mikrotik-Rate-Limit</var> attribute from your RADIUS Server for your DHCPv6 binding. To achieve this you first need to set your DHCPv6 Server to use RADIUS for assigning bindings. Below is an example how to set it up:
<pre>
/radius
add address=10.0.0.1 secret=VERYsecret123 service=dhcp
/ipv6 dhcp-server
set dhcp1 use-radius=yes
</pre>

After that you need to tell your RADIUS Server to pass the <var>Mikrotik-Rate-Limit</var> attribute. In case you are using FreeRADIUS with MySQL, then you need to add appropriate entries into '''radcheck''' and '''radreply''' tables for a MAC address, that is being used for your DHCPv6 Client. Below is an example for table entries:
<pre>
INSERT INTO `radcheck` (`username`, `attribute`, `op`, `value`) VALUES
('000c4200d464', 'Auth-Type', ':=', 'Accept'),

INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`) VALUES
('000c4200d464', 'Delegated-IPv6-Prefix', '=', 'fdb4:4de7:a3f8:418c::/66'),
('000c4200d464', 'Mikrotik-Rate-Limit', '=', '10M');
</pre>

{{ Note | By default <var>allow-dual-stack-queue</var> is enabled and will add a single dynamic queue entry if the MAC address from the IPv4 lease (or DUID, if the DHCPv4 Client supports <code>Node-specific Client Identifiers</code> from RFC4361), but DUID from DHCPv6 Client is not always based on the MAC address from the interface on which the DHCPv6 Client is running on, DUID is generated on per-device basis. For this reason a single dynamic queue entry might not be created, separate dynamic queue entries might be created instead. }}

==Configuration Examples==

===Enabling IPv6 Prefix delegation===

Lets consider that we already have running DHCP server.

To enable IPv6 prefix delegation, first we need to create address pool

/ipv6 pool add name=myPool prefix=2001:db8:7501::/60 prefix-length=62

Notice that prefix-length is 62 bits, it means that clients will receive /62 prefixes from the /60 pool.

Next step is to enable DHCP-PD.

/ipv6 dhcp-server add name=myServer address-pool=myPool interface=local

To test our server we will set up wide-dhcpv6 on ubuntu machine:
* install wide-dhcpv6-client
* edit "/etc/wide-dhcpv6/dhcp6c.conf" as above

{{ Note | You can use also RouterOS as DHCP-PD client. <code>[[M:IPv6/DHCP_Client#IPv6-PD_setup_example | Read more >>]] </code> }}

interface eth2{
send ia-pd 0;
};

id-assoc pd {
prefix-interface eth3{
sla-id 1;
sla-len 2;
};
};

* Run DHCP-PD client

sudo dhcp6c -d -D -f eth2

* Verify that prefix was added to eth3

mrz@bumba:/media/aaa$ ip -6 addr
..
2: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
inet6 2001:db8:7501:1:200:ff:fe00:0/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::224:1dff:fe17:81f7/64 scope link
valid_lft forever preferred_lft forever

* You can make binding to specific client static, so that it always receives the same prefix

[admin@RB493G] /ipv6 dhcp-server binding> print
Flags: X - disabled, D - dynamic
# ADDRESS DU IAID SER.. STATUS
0 D 2001:db8:7501:1::/62 16 0 loc.. bound
[admin@RB493G] /ipv6 dhcp-server binding> make-static 0

* DHCP-PD also installs route to assigned prefix into IPv6 routing table

[admin@RB493G] /ipv6 route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
# DST-ADDRESS GATEWAY DISTANCE
...
2 ADS 2001:db8:7501:1::/62 fe80::224:1dff:fe17:8... 1

IPv6: Mikrotik: DHCPv6 - Revision history

Onnowpurbo at 05:31, 6 February 2019

Onnowpurbo: /* Rate limiting */

Onnowpurbo: /* Menu specific commands */

Onnowpurbo: /* Bindings */

Onnowpurbo: /* General */

Onnowpurbo: /* General */

Onnowpurbo at 03:21, 6 February 2019

Onnowpurbo: Created page with "{{Versions|v5.9+}} ==Summary== Standards: RFC 3315, RFC 3633 Package: dhcp,ipv6 Starting from v5.9 DHCP-PD..."

Onnowpurbo: Created page with "{{Versions|v5.9+}} ==Summary==
Standards: `RFC 3315, RFC 3633`
Package: `dhcp,ipv6`
Starting from v5.9 DHCP-PD..."