How to statically set up ipv6 on mikrotik?

Question

Mikrotik

There is 2011UiAS-2HnD (ROS 6.23.3):
gate-ciat -
ether2-ether5 default gateway, wlan - bridge-local The

provider provides IPv6, but does not have DHCP. (2a00:16:15::/64 - subnet, 2a00:16:15::1 - gateway)

[[email protected] GATE] /ipv6>> address print 
Flags: X - disabled, I - invalid, D - dynamic, G - global, L - link-local 
 #    ADDRESS   FROM-POOL              INTERFACE                             ADVERTISE
 0 DL fe80::e38/64                       bridge-local           no       
 1 DL fe80::e37/64                       gate-ciat                no       
 2 DL fe80::0c/64                         gate-ukrtel              no       
 3 DL fe80::f0:1/64                       <pptp-Gusar>         no       
 4  G 2a00:16:15:0:1::/64               ether2-master-local          yes      
 5  G 2a00:16:15::2/64                  gate-ciat


[[email protected] GATE] /ipv6>> firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=input action=drop protocol=tcp in-interface=gate-ciat dst-port=53
 log=no log-prefix="" 

 1    chain=input action=drop protocol=udp in-interface=gate-ciat dst-port=53 
log=no log-prefix="" 

 2    ;;; Allow limited ICMP
      chain=input action=accept protocol=icmpv6 limit=50/5s,5 log=no 
log-prefix="" 

 3    ;;; Allow established connections
      chain=input action=accept connection-state=!invalid log=no 
log-prefix="" 

 4    ;;; Allow UDP
      chain=input action=accept protocol=udp connection-state=!invalid 
log=no log-prefix="" 

 5    chain=input action=drop in-interface=gate-ciat log=no log-prefix="" 

 6    ;;; Allow any to internet
      chain=forward action=accept connection-state=established,related 
log=no log-prefix="" 

 7    chain=forward action=drop log=no log-prefix=""

[[email protected] GATE] /ipv6>> nd print 
Flags: X - disabled, I - invalid, * - default 
 0  * interface=all ra-interval=3m20s-10m ra-delay=3s mtu=unspecified 
reachable-time=1m retransmit-interval=unspecified ra-lifetime=30m hop-limit=64

[[email protected] GATE] /ipv6>> route print    
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, 
o - ospf, b - bgp, U - unreachable 
 #      DST-ADDRESS              GATEWAY                  DISTANCE
 0 A S  ::/0                     2a00:16:15::1                  1
 1 ADC  2a00:16:15::/64         bridge-local                    0
                                 gate-ciat

At the same time, all devices behind the router see only 2a00:16:15::/16, except for 2a00:16:15::1.
How do I set up routing for the local network so that devices get a route to the world and accept incoming connections from the world?

At the moment, the route from the computer behind the router looks like this:
2a00:16:15::/64 dev enp1s0f0 proto ra metric 100

Answer 1

And why did you hang out your network on two different interfaces at once? Are you using ND Proxy?
In addition, providers usually issue one network for the internal needs of the client, and one for communication with the provider's router. Sometimes the external network is issued automatically by dhcpv6 and / or RA, if not explicitly specified.

Answer 2

If I don’t confuse anything, then it’s enough to add these two entries:
one is a static address on the interface looking into the local network, with the property of publishing itself as a router, the second is the distribution of addresses to the local network (I think in the context it’s clear what is what).