MikroTik 6to4 orqali IPv6 ulanishini yo‘lga qo‘yish

⏱ O‘qish vaqti: 2 daqiqa

IPv4 tarmog‘ida IPv6 aloqasini yaratish ko‘pincha maxsus tunnel sozlamalarini talab qiladi. 6to4 mexanizmi bu jarayonni soddalashtiradi, lekin to‘g‘ri interfeys va marshrutlarni yaratish zarur. Ushbu qo‘riqnoma RouterOS’da 6to4 interfeysini yaratish, IPv6 manzilini belgilash va Hurricane Electric tunnel broker orqali IPv6 ulanishni sozlashni ko‘rsatadi.

Talablar

• RouterOS terminaliga admin huquqi bilan kirish
• Jamoat (ommaviy) IPv4 manziliga erishish
• Hurricane Electric tunnel broker’dan olingan IPv6 prefiks (agar foydalanilsa)

Sozlash bosqichlari

1. 6to4 interfeysini yaratish

/interface 6to4 menyusiga kirib, yangi 6to4 interfeysini qo‘shish uchun add name=6to4-tunnel1 buyrug‘ini bajarish kifoya. Bu interfeys IPv6 paketlarini IPv4 orqali enkapsulyatsiya qilish uchun asos bo‘ladi.

/interface 6to4
add name=6to4-tunnel1

2. IPv6 manzilini tayinlash

Yaratilgan interfeysga 2002:a00:101::/128 IPv6 manzilini berish uchun add address=2002:a00:101::/128 advertise=no interface=6to4-tunnel1 buyrug‘ini ishlating. Manzilning birinchi 16 biti 2002 bo‘lishi 6to4 mexanizmini faollashtiradi.

/ipv6 address
add address=2002:a00:101::/128 advertise=no interface=6to4-tunnel1

3. 6to4 marshrutini qo‘shish

/ipv6 route bo‘limida add dst-address=2002::/16 gateway=6to4-tunnel1 buyrug‘i orqali 2002::/16 tarmog‘ini 6to4 interfeysiga yo‘naltiring. Bu marshrut IPv6 paketlarini to‘g‘ridan‑to‘g‘ri IPv4 tarmog‘iga yuboradi.

/ipv6 route
add dst-address=2002::/16 gateway=6to4-tunnel1

4. Hurricane Electric tunnel broker sozlamalari

Hurricane Electric tunnel broker tomonidan berilgan ma’lumotlarni RouterOS’da kiritish uchun kod blok 6 ni bajarish kifoya. Bu blok 6to4 interfeysini, IPv6 marshrutini va tunnelga IPv6 manzilini sozlaydi.

/interface 6to4
add comment="Hurricane Electric IPv6 Tunnel Broker" disabled=no local-address=194.105.56.170 mtu=1280 name=sit1 remote-address=216.66.80.90
/ipv6 route
add comment="" disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:27:37e::1 scope=30 target-scope=10
/ipv6 address
add address=2001:470:27:37e::2/64 advertise=no disabled=no eui-64=no interface=sit1

5. Ichki tarmoqga IPv6 prefiksini qo‘shish

/ipv6 address add address=2001:470:28:37e:: interface=bridge-local advertise=yes buyrug‘i orqali ichki bridge‑local interfeysiga routed /64 prefiksini qo‘shing, shunda tarmoq ichidagi qurilmalar IPv6 manzillarini olishadi.

/ipv6 address add address=2001:470:28:37e:: interface=bridge-local advertise=yes

6. IPv6 DNS reklamasi

/ipv6 nd set [ find default=yes ] advertise-dns=yes buyrug‘i bilan router IPv6 DNS‑ni reklama qiladi, bu esa mijoz qurilmalarga avtomatik DNS ma’lumotini beradi.

/ipv6 nd set [ find default=yes ] advertise-dns=yes

7. IPv6 DNS serverlarini belgilash

/ip dns set allow-remote-requests=yes servers=2001:4860:4860::8888,2001:4860:4860::8844 buyrug‘i orqali Google‑ning IPv6 DNS serverlarini qo‘shing, shunda tarmoq ichidagi qurilmalar DNS so‘rovlarini IPv6 orqali bajaradi.

/ip dns set allow-remote-requests=yes servers=2001:4860:4860::8888,2001:4860:4860::8844

Tekshirish

Tunnel sozlamalari to‘g‘ri bo‘lsa, ping buyrug‘i orqali ikkinchi routerning IPv6 manziliga murojaat qilib ulanishni tasdiqlang.

/ping 2002:a00:201::

Muammolar va yechimlar

IPv6 manzilga ping javob bermaydi

IPv4 manzilga ping qilib erishuvni tekshiring, firewall qoidalarini ko‘rib chiqing

Xulosa

6to4 interfeysi va Hurricane Electric tunnel broker yordamida RouterOS’da IPv6 aloqasini tez va oson yo‘lga qo‘yishingiz mumkin. To‘g‘ri marshrut va DNS sozlamalari tarmoq ichidagi barcha qurilmalarga IPv6 imkoniyatini beradi.

Manba: 6to4 — help.mikrotik.com