From 5edf1c68b53215c1d6ba54d3373de0e94042a6aa Mon Sep 17 00:00:00 2001 From: Kapil Agrawal <7047165+netops2devops@users.noreply.github.com> Date: Sat, 14 Dec 2024 22:04:56 -0600 Subject: [PATCH] updated about section. Minor update to a post --- content/about.md | 4 +- content/posts/mikrotik-ipv6.md | 24 +++++++++-- public/about/index.html | 10 ++--- public/archives/index.html | 14 +++---- public/index.html | 14 +++---- public/index.json | 2 +- public/index.xml | 60 +++++++++++++++++++++------ public/posts/index.html | 14 +++---- public/posts/index.xml | 60 +++++++++++++++++++++------ public/posts/mikrotik-ipv6/index.html | 39 ++++++++++++++--- public/posts/my-dev-env/index.html | 2 +- 11 files changed, 181 insertions(+), 62 deletions(-) diff --git a/content/about.md b/content/about.md index a9f1f60..cf7aeb0 100644 --- a/content/about.md +++ b/content/about.md @@ -1,10 +1,10 @@ # Hello world -Welcome to my blog. My name is Kapil Agrawal (pronunciation: `cup-ill`) and I am a *Security Engineer* by profession. My current role mostly focuses on Network security, DevSecOps and developing security tools and automating workflows for security operations. Prior to moving into a Cybersecurity role, I was a Network Engineer and had several years of experience working in service provider and HPC data center networking and automation. I have many interests most of which involve Linux, networking, security, software, Infrastucture as code. In my downtime I enjoy hiking, kayaking or working out (HIIT), gaming, traveling or playing with Juniper (my cat). +Welcome to my blog. My name is Kapil Agrawal (pronunciation: `cup-ill`) and I am a *Security Engineer* by profession. These days I mostly focus on things involving Kubernetes networking and security. I also have an extensive background in network operations and infrastructure automation. Generally speaking, I like to live at the intersection of networking, systems, software & security. In my downtime I go hiking or kayaking, traveling or staying home gaming, working in my homelab or playing with Juniper (my cat). ## Motivation -Since I rely heavily on Open source and the work that others put out online for free, I wanted to do my due diligence and share some of the cool stuff that I get to learn and work on which I usually end up documenting somewhere in my notes anyway. My hope is that someone on the internet could benefit from the information here plus it helps me work on my technical writing skills and also gives me a good reason to finally start using this domain that I have been squatting on for so long. +Since I rely heavily on Open source and the work that others put out online for free, I wanted to do my due diligence and share some of the cool stuff that I get to learn and work on which I usually end up documenting somewhere in my notes anyway. My hope is that someone on the internet could benefit from the information here and it also gives me a good reason to finally start using this domain that I have been squatting on for so long. I am super passionate about learning and sharing. Thanks for stopping by. I hope you find the articles in this blog helpful. diff --git a/content/posts/mikrotik-ipv6.md b/content/posts/mikrotik-ipv6.md index 3843948..caecb86 100644 --- a/content/posts/mikrotik-ipv6.md +++ b/content/posts/mikrotik-ipv6.md @@ -1,9 +1,27 @@ --- title: IPv6 prefix delegation on Mikrotik -date: 2024-05-26 +date: 2024-12-14 tags: ["IPv6", "Mikrotik", "Networking"] author: "Kapil Agrawal" comments: false -description: "RouterOS config to get IPv6 prefix delegation from your ISP" +description: "Mikrotik RouterOS config for IPv6 prefix delegation" --- -## Config \ No newline at end of file +## RouterOS config + +```sh +# Configure interface group +/interface list add comment="UPLINK to ISP" name=WAN +/interface list member add comment="WAN facing interface" interface=ether1 list=WAN + +# Enable router-advertisement incoming from the ISP +/ipv6 settings set accept-router-advertisements=yes + +# Request an IPv6 prefix over WAN interface; my ISP hands out a /56 +/ipv6 dhcp-client add add-default-route=yes interface=ether1 pool-name=delegation pool-prefix-length=56 prefix-hint=::/56 request=address,prefix + +# Only accept inbound router-advertisements on the WAN interface +/ipv6 firewall filter add action=drop chain=input icmp-options=134:0-255 in-interface-list=!WAN protocol=icmpv6 + +# Allow prefix delegatation on WAN interface +/ipv6 firewall filter add action=accept chain=input comment="accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10 +``` diff --git a/public/about/index.html b/public/about/index.html index 9c14d8c..14bf361 100644 --- a/public/about/index.html +++ b/public/about/index.html @@ -1,12 +1,12 @@ netops2devops
Table of Contents

Hello world

Welcome to my blog. My name is Kapil Agrawal (pronunciation: cup-ill) and I am a Security Engineer by profession. These days I mostly focus on things involving Kubernetes networking and security. I also have an extensive background in network operations and infrastructure automation. Generally speaking, I like to live at the intersection of networking, systems, software & security. In my downtime I go hiking or kayaking, traveling or staying home gaming, working in my homelab or playing with Juniper (my cat).

Motivation

Since I rely heavily on Open source and the work that others put out online for free, I wanted to do my due diligence and share some of the cool stuff that I get to learn and work on which I usually end up documenting somewhere in my notes anyway. My hope is that someone on the internet could benefit from the information here and it also gives me a good reason to finally start using this domain that I have been squatting on for so long. I am super passionate about learning and sharing.

Thanks for stopping by. I hope you find the articles in this blog helpful.

Ciao! 👋