Hi All, I'm running a Mikrotik 750G r3 Hex on 6.48 and using ether1 for an NBN connection which leases an IPv6 address and /56 prefix fine. On ether2 I have a Netgear LB2120 4G router in bridge mode with a Telstra prepaid SIM, using the telstra.internet APN and configured the PDP for IPV4V6. I've got the same IPv6 firewall rule setup for ether2 as I do ether1, yet I cannot lease an IPv6 address from it. ether2 has no problems leasing an IPv4 (Telstra CGNAT) address. Has anyone had any success in getting IPv6 working on a Telstra prepaid 4G service? Relevant IPv6 configs below /ipv6 dhcp-client add add-default-route=yes interface=ether1 pool-name=superloop request=address,prefix use-peer-dns=no add interface=ether2 pool-name=telstra request=address,prefix use-peer-dns=no /ipv6 firewall filter add action=accept chain=input comment="Accept ICMPv6 to Router" in-interface=ether1 protocol=icmpv6 add action=accept chain=input comment="Accept ICMPv6 to Router from LTE" in-interface=ether2 protocol=icmpv6 add action=accept chain=input comment="Accept DHCPv6 to Router" dst-port=546 in-interface=ether1 log=yes protocol=udp add action=accept chain=input comment="Accept DHCPv6 to Router from LTE" dst-port=546 in-interface=ether2 log=yes protocol=udp add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp add action=accept chain=input comment="Accept IPv6 established,related to Router" connection-state=established,related in-interface=ether1 add action=accept chain=input comment="Accept IPv6 established,related to Router from LTE" connection-state=established,related in-interface=ether2 add action=drop chain=input comment="Deny ALL to Router" in-interface=ether1 add action=accept chain=forward comment="Accept ICMPv6 to LAN" in-interface=ether1 protocol=icmpv6 add action=drop chain=forward comment=invalid connection-state=invalid in-interface=ether1 log=yes log-prefix=ipv6,invalid add action=accept chain=forward comment="Accept IPv6 established,related to LAN" connection-state=established,related in-interface=ether1 add action=drop chain=forward comment="Deny ALL to LAN" in-interface=ether1 Thanks, Chris
participants (1)
-
Chris Lee