Category: IPV6

Categories
IPV6 Mikrotik Networking

Vultr, Mikrotik and IPV6

Over at my j2sw Blog I posted an article on setting up a Mikrotik CHR under a Vultr Instance. Check it out.

MikroTik Router as a Vultr host
Categories
IPV6 Networking

Packet Pushers – IPV6 address Planning

IPv6 Buzz 011: An IPv6 Address Planning Guide

Categories
IPV6 Networking

IPV6 point-to-point subnets

Become a Patron to see this content
This content is available exclusively to members of Justin's Patreon at $1 or higher tier, or having at least $1 pledged in total.
Unlock with Patreon
Already a qualifying Patreon member? Refresh to access this content.
Categories
IPV6 Mikrotik Networking

Basic IPV6 Mikrotik Firewall

Below is a basic IPV6 firewall fillter for your Mikrotik CPE devices.  This is a good start for customer-facing CPE.

 


/ipv6 firewall filter

add chain=forward comment="allow forwarding established, related" connection state=established,related
add chain=forward comment="allow forward lan->wan" in-interface=lan out-interface=wan
add chain=forward comment="allow ICMPv6 forwarding" in-interface=wan protocol=icmpv6
add action=reject chain=forward comment="reject every other forwarding request" reject-with=icmp-port-unreachable
add chain=input comment="accept established, related" connection-state=established,related
add chain=input comment="allow ICMPv6" in-interface=wan protocol=icmpv6
add chain=input comment="allow DHCPv6 renew" dst-address=fc00::/6 dst-port=546 in-interface=wan protocol=udp src-address=fc00::/6
add chain=input comment="allow lan" in-interface=lan
add action=reject chain=input comment="reject everything else" reject-with=icmp-port-unreachable