Identifying an end user on an IPv6 network using a MikroTik router can be done in several ways, depending on what you specifically need to identify or monitor.

We explain some methods and configurations that are commonly used in this context:

1. IPv6 addresses

In an IPv6 network, each connected device receives one or more IPv6 addresses, which can be identified and managed through the MikroTik router:

• Unicast Global Addresses: These are the standard IPv6 addresses used for communication on the Internet. They can be assigned statically or automatically (via DHCPv6 or SLAAC stateless autoconfiguration).
• Link-Local Addresses: Each device on an IPv6 network has a link-local address that is only valid and unique on the local network. In MikroTik, you can see these addresses by accessing the list of interfaces and their respective addresses.

2. DHCPv6 Server & Lease

If your network uses DHCPv6 to distribute IPv6 addresses, the MikroTik router can be configured to act as a DHCPv6 server:

• DHCPv6 configuration: You can configure the MikroTik to offer IPv6 addresses, DNS options, and more.
• DHCPv6 Lease Verification: MikroTik allows you to view all leases granted to devices, which includes the assigned IPv6 address, the client's DUID, and the lease duration. This is useful for identifying which device has each address assigned to it.

3. Neighbor Discovery Protocol (NDP)

NDP is a key component of IPv6 and performs similar functions to ARP in IPv4. MikroTik can display the NDP table, which includes the IPv6 address and associated MAC address of each device on the local network:

• Viewing the NDP Table: From the command line interface or WinBox, you can view the MAC addresses associated with IPv6 addresses, allowing you to identify specific devices on your network.

4. Firewall and Mangle

You can use MikroTik's firewall capabilities to monitor, filter or prioritize IPv6 traffic based on IP addresses, ports, protocols and more:

• Firewall Rules: Configure rules to control access or log activities for certain IPv6 addresses.
• Mangle: Uses mangle to mark packets and manage traffic policies, which can help identify and control the flow of data to and from specific devices.

5. Logging and Monitoring

For more detailed management, you can enable logging and monitoring on the MikroTik to keep track of IPv6-related network connections and events:

• Syslog and Log Files: Configure MikroTik to send logs to a Syslog server or maintain internal logs that you can review to understand network behavior.

Each of these methods provides a way to identify and manage users and devices on an IPv6 network using a MikroTik router, allowing detailed control and the ability to respond to specific network needs.