Update configuration on IPv6 prefix change
ℹ️ Info: This script can not be used on its own but requires the base installation. See main README for details.
Description
With changing IPv6 prefix from ISP this script handles to update...
- ipv6 firewall address-list (prefixes (
/64) and host addresses (/128)) - dns records
Requirements and installation
Just install the script:
$ScriptInstallUpdate ipv6-update;
Your ISP needs to provide an IPv6 prefix, your device receives it via dhcp:
/ipv6/dhcp-client/add add-default-route=yes interface=ppp-isp pool-name=isp request=prefix script=ipv6-update;
Note this already adds this script as script. The pool name (here: "isp")
is important, we need it later.
Also this expects there is an address assigned from pool to an interface:
/ipv6/address/add from-pool=isp interface=br-local;
Sometimes dhcp client is stuck on reconnect and needs to be released. Installing ppp-on-up may solve this.
Configuration
As an address-list entry is mandatory a dynamic one is created automatically. It is updated with current prefix and can be used in firewall rules.
Alternatively a static address-list entry can be used, where comment has to
be "ipv6-pool-" and actual pool name. Use what ever list is desired, and
create it with:
/ipv6/firewall/address-list/add address=2003:cf:2f0f:de00::/56 comment=ipv6-pool-isp list=extern;
If the dynamic entry exists already you need to remove it before creating the static one..
Address list entries for specific interfaces can be updated as well. The
interface needs to get its address from pool isp and the address list entry
has to be associated to an interface in comment:
/ipv6/firewall/address-list/add address=2003:cf:2f0f:de01::/64 comment="ipv6-pool-isp, interface=br-local" list=local;
Updating address list entries with host addresses works as well, the new prefix is combinded with given suffix then:
/ipv6/firewall/address-list/add address=2003:cf:2f0f:de01:e3e0:f8fa:8cd6:dbe1/128 comment="ipv6-pool-isp, interface=br-local" list=hosts;
Static DNS records need a special comment to be updated. Again it has to
start with "ipv6-pool-" and actual pool name, followed by a comma,
"interface=" and the name of interface this address is connected to:
/ip/dns/static/add address=2003:cf:2f0f:de00:1122:3344:5566:7788 comment="ipv6-pool-isp, interface=br-local" name=test.example.com ttl=15m;