General • IPv6 bitmask in dst-address?

In order to write IPv6 rules that apply regardless of ipv6 prefix, you can do the following in OpenWRT:
in ip6tables, you can specify a bitmask (to specify that the _last_ 64 bits should match:
None of these seems to work when specifying dst-address on a ipv6 rule in RouterOS. Is there any plans on supporting this somehow? Anyone that has dynamic ipv6 prefixes has the problem that in the event you get a prefix change, your rule stops working. This is even more error prone because if you accidentally remove an ipv6 address from your interface, the old address is gonna be gone for a few days (or is it 30 by default?), adding an address will assign you a new /64 prefix, and eventually also revert back (this has happened to me). Having a rule that needs the full explicit /128 address is very unfortunate in all of these circumstances.

Statistics: Posted by jishi — Mon Jan 08, 2024 10:57 pm

---