Hi All,
I'm running a Mikrotik 750G r3 Hex on 6.48 and using ether1 for an NBN
connection which leases an IPv6 address and /56 prefix fine.
On ether2 I have a Netgear LB2120 4G router in bridge mode with a Telstra
prepaid SIM, using the telstra.internet APN and configured the PDP for
IPV4V6.
I've got the same IPv6 firewall rule setup for ether2 as I do ether1, yet I
cannot lease an IPv6 address from it. ether2 has no problems leasing an
IPv4 (Telstra CGNAT) address.
Has anyone had any success in getting IPv6 working on a Telstra prepaid 4G
service?
Relevant IPv6 configs below
/ipv6 dhcp-client
add add-default-route=yes interface=ether1 pool-name=superloop
request=address,prefix use-peer-dns=no
add interface=ether2 pool-name=telstra request=address,prefix
use-peer-dns=no
/ipv6 firewall filter
add action=accept chain=input comment="Accept ICMPv6 to Router"
in-interface=ether1 protocol=icmpv6
add action=accept chain=input comment="Accept ICMPv6 to Router from LTE"
in-interface=ether2 protocol=icmpv6
add action=accept chain=input comment="Accept DHCPv6 to Router"
dst-port=546 in-interface=ether1 log=yes protocol=udp
add action=accept chain=input comment="Accept DHCPv6 to Router from LTE"
dst-port=546 in-interface=ether2 log=yes protocol=udp
add action=accept chain=input comment="defconf: accept UDP traceroute"
port=33434-33534 protocol=udp
add action=accept chain=input comment="Accept IPv6 established,related to
Router" connection-state=established,related in-interface=ether1
add action=accept chain=input comment="Accept IPv6 established,related to
Router from LTE" connection-state=established,related in-interface=ether2
add action=drop chain=input comment="Deny ALL to Router" in-interface=ether1
add action=accept chain=forward comment="Accept ICMPv6 to LAN"
in-interface=ether1 protocol=icmpv6
add action=drop chain=forward comment=invalid connection-state=invalid
in-interface=ether1 log=yes log-prefix=ipv6,invalid
add action=accept chain=forward comment="Accept IPv6 established,related to
LAN" connection-state=established,related in-interface=ether1
add action=drop chain=forward comment="Deny ALL to LAN" in-interface=ether1
Thanks,
Chris