IPv6: OpenVPN Simple - Revision history

Unknown user at 04:08, 5 December 2022

2022-12-05T04:08:30Z

← Older revision		Revision as of 04:08, 5 December 2022
Line 10:		Line 10:
	/interface bridge add name=ovpn6		/interface bridge add name=ovpn6
	/ppp profile add bridge=ovpn6 name=ovpn6srv		/ppp profile add bridge=ovpn6 name=ovpn6srv
	/interface ovpn-server server default-profile=ovpn6srv enabled=yes mode=ethernet		/interface ovpn-server server set default-profile=ovpn6srv enabled=yes mode=ethernet
	/ipv6 address add address=2001:aabb:ccdd:1::1/64 advertise=yes eui-64=no interface=ovpn6		/ipv6 address add address=2001:aabb:ccdd:1::1/64 advertise=yes eui-64=no interface=ovpn6
	/ipv6 route add dst-address=2001:aabb:ccdd:2::/64 gateway=2001:aabb:ccdd:1::2		/ipv6 route add dst-address=2001:aabb:ccdd:2::/64 gateway=2001:aabb:ccdd:1::2

Unknown user at 03:30, 5 December 2022

2022-12-05T03:30:10Z

← Older revision		Revision as of 03:30, 5 December 2022
Line 1:		Line 1:
	Sumber: https://forum.mikrotik.com/viewtopic.php?f=13&t=38026#p187333		Sumber: https://forum.mikrotik.com/viewtopic.php?f=13&t=38026#p187333

	~~No simple 4/6 NAT is possible. There are some attempts, but mostly to allow IPv6 only hosts to access old IPv4 internet. Not your thing and not available in RoS.~~

	If you have IPv6 connectivity at another location and can create OpenVPN tunnel, then it's your best option. Of course, native connectivity would be better, but this is something you can have in ten minutes from now. Following is simplified (important parameters only) example of working setup:


	NAT 4/6 sederhana tampaknya tidak mungkin. Ada beberapa upaya, tetapi sebagian besar hanya mengizinkan host IPv6 untuk mengakses internet IPv4 lama.		NAT 4/6 sederhana tampaknya tidak mungkin. Ada beberapa upaya, tetapi sebagian besar hanya mengizinkan host IPv6 untuk mengakses internet IPv4 lama.
Line 26:		Line 21:
	/ipv6 address add address=2002:aabb:ccdd:2::1/64 advertise=yes eui-64=no interface=internal		/ipv6 address add address=2002:aabb:ccdd:2::1/64 advertise=yes eui-64=no interface=internal

	MAC address in ovpn-client ~~seems to~~ default ~~to all zeros and it doesn't work~~. ~~Put there something unique~~.		MAC address di ovpn-client tampaknya default ke semua nol dan tidak berfungsi. Taruh di sana sesuatu yang unik.
	~~In theory it should work even without adding route on client~~, ~~but it seems that~~ RoS ~~does not pick up~~ router ~~advertisements~~.		Secara teori, itu seharusnya bekerja bahkan tanpa menambahkan rute pada klien, tetapi tampaknya RoS tidak menerima router advertisement.

Unknown user at 03:28, 5 December 2022

2022-12-05T03:28:50Z

← Older revision		Revision as of 03:28, 5 December 2022
Line 4:		Line 4:

	If you have IPv6 connectivity at another location and can create OpenVPN tunnel, then it's your best option. Of course, native connectivity would be better, but this is something you can have in ten minutes from now. Following is simplified (important parameters only) example of working setup:		If you have IPv6 connectivity at another location and can create OpenVPN tunnel, then it's your best option. Of course, native connectivity would be better, but this is something you can have in ten minutes from now. Following is simplified (important parameters only) example of working setup:


			NAT 4/6 sederhana tampaknya tidak mungkin. Ada beberapa upaya, tetapi sebagian besar hanya mengizinkan host IPv6 untuk mengakses internet IPv4 lama.

			Jika Anda memiliki konektivitas IPv6 di lokasi lain dan dapat membuat terowongan OpenVPN, maka itu pilihan terbaik Anda. Tentu saja, konektivitas asli akan lebih baik, tetapi ini adalah sesuatu yang dapat Anda miliki dalam sepuluh menit dari sekarang. Berikut adalah contoh penyetelan kerja yang disederhanakan (parameter penting saja):


	Basic server settings:		Basic server settings:

Unknown user: Created page with "Sumber: https://forum.mikrotik.com/viewtopic.php?f=13&t=38026#p187333 No simple 4/6 NAT is possible. There are some attempts, but mostly to allow IPv6 only hosts to access ol..."

2022-12-05T03:27:01Z

Created page with "Sumber: https://forum.mikrotik.com/viewtopic.php?f=13&t=38026#p187333 No simple 4/6 NAT is possible. There are some attempts, but mostly to allow IPv6 only hosts to access ol..."

New page

Sumber: https://forum.mikrotik.com/viewtopic.php?f=13&t=38026#p187333

No simple 4/6 NAT is possible. There are some attempts, but mostly to allow IPv6 only hosts to access old IPv4 internet. Not your thing and not available in RoS.

If you have IPv6 connectivity at another location and can create OpenVPN tunnel, then it's your best option. Of course, native connectivity would be better, but this is something you can have in ten minutes from now. Following is simplified (important parameters only) example of working setup:

Basic server settings:

/interface bridge add name=ovpn6
/ppp profile add bridge=ovpn6 name=ovpn6srv
/interface ovpn-server server default-profile=ovpn6srv enabled=yes mode=ethernet
/ipv6 address add address=2001:aabb:ccdd:1::1/64 advertise=yes eui-64=no interface=ovpn6
/ipv6 route add dst-address=2001:aabb:ccdd:2::/64 gateway=2001:aabb:ccdd:1::2

Basic client settings:

/interface ovpn-client add mac-address=00:AA:BB:CC:DD:EE mode=ethernet name=ovpn6cli
/ipv6 address add address=2002:aabb:ccdd:1::2/64 advertise=no eui-64=no interface=ovpn6cli
/ipv6 route add dst-address=2000::/3 gateway=2001:aabb:ccdd:1::1
/ipv6 address add address=2002:aabb:ccdd:2::1/64 advertise=yes eui-64=no interface=internal

MAC address in ovpn-client seems to default to all zeros and it doesn't work. Put there something unique.
In theory it should work even without adding route on client, but it seems that RoS does not pick up router advertisements.

==Referensi==

* https://forum.mikrotik.com/viewtopic.php?f=13&t=38026#p187333