Technical Tip: Changing NAT64 prefix

Description

This article describes that an IPv6 prefix is needed by DNS64 to convert the A records into AAAA records.

The value of the 'Well-Known Prefix' is 64:ff9b::/96.

This article describes how to change NAT64 prefix.

Solution

This value can be changed on the FortiGate at the VDOM level by using following CLI command:

config system nat64
   set nat64-prefix 64:2310::/96
end

Note:

Versions 5.0 up to 6.4 are out of engineering support. So these commands might be different on higher versions.

Consider upgrading the firmware level on the device to a supported version (7.0 up to 7.6). Check the firmware path and compatibility depending on the hardware: Upgrade tool.