Hello all, I've just spent the weekend with my new 450G (waiting for the
1100) trying to get the 6-to-4 tunnels up. They work on Linux routers, but
on this, I've not got it yet.
I can see the IPv4 firewall logs traffic both in and out on type 41.
I can see the IPv6 firewall sends packets out the sit interface, but they
never return.
Any ideas? My config (or the important parts of it) is attached
/interface ethernet
set 0 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
comment=\
"" disabled=no full-duplex=yes l2mtu=1524 mac-address=00:0C:42:5B:8D:F0
\
master-port=none mtu=1500 name=ether1-gateway speed=100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
comment=\
"" disabled=no full-duplex=yes l2mtu=1524 mac-address=00:0C:42:5B:8D:F1
\
master-port=none mtu=1500 name=ether2-local speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
comment=\
"" disabled=no full-duplex=yes l2mtu=1524 mac-address=00:0C:42:5B:8D:F2
\
master-port=none mtu=1500 name=ether3-local speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
comment=\
"" disabled=no full-duplex=yes l2mtu=1524 mac-address=00:0C:42:5B:8D:F3
\
master-port=none mtu=1500 name=ether4-local speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
comment=\
"" disabled=no full-duplex=yes l2mtu=1524 mac-address=00:0C:42:5B:8D:F4
\
master-port=none mtu=1500 name=ether5-local speed=100Mbps
/interface 6to4
add comment="Hurricane Electric IPv6 Tunnel Broker" disabled=no \
local-address=w1.x1.y1.z1 mtu=1280 name=sit1 remote-address=w2.x2.y2.z2
/ip address
add address=10.0.0.2/16 broadcast=10.0.255.255 comment=\
"default configuration" disabled=no interface=ether2-local network=\
10.0.0.0
add address=a.b.c.d/29 broadcast=a.b.c.255 comment="" disabled=no \
interface=ether1-gateway network=a.b.c.248
/ip neighbor discovery
set ether1-gateway discover=no
set ether2-local discover=yes
set ether3-local discover=yes
set ether4-local discover=yes
set ether5-local discover=yes
set bridge discover=yes
set sit1 discover=no
/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=w.x.y.z scope=30 target-scope=10
/ipv6 address
add address=2001:555:1234:ba2::2/64 advertise=yes comment="" disabled=no \
eui-64=no interface=sit1
add address=2001:555:1234:ba2::1/64 advertise=yes comment="" disabled=no \
eui-64=no interface=ether2-local
/ipv6 nd
add advertise-dns=no advertise-mac-address=yes disabled=no hop-limit=\
unspecified interface=all managed-address-configuration=no mtu=\
unspecified other-configuration=no ra-delay=3s ra-interval=3m20s-10m \
ra-lifetime=30m reachable-time=unspecified retransmit-interval=\
unspecified
/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d
/ipv6 route
add check-gateway=ping comment="" disabled=no distance=1
dst-address=2000::/3 \
gateway=sit1 scope=30 target-scope=10
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.butchevans.com/pipermail/mikrotik/attachments/20100502/07e0a853/attachment.html>
_______________________________________________
Mikrotik mailing list
[email protected]
http://www.butchevans.com/mailman/listinfo/mikrotik
Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS