NAT64 for traffic over IPv6 Tunnel through IPsecVPN not working..

Forum|Forum|11 years ago
June 10, 2015
3 replies
4968 views

Hi,

I am configuring NAT64 policy from Sit-tunnel to external IPv4 interface.

The Sit-tunnel established over IPv6 Tunnel through IPSec(V4)VPN.

V6 LANs Reaching each other.

NAT64 at HO workd well for HO ip6 lan.

But not successful for Branch lan

The NAT64 policy i am creating from Sit-Tunnel to IPv4.

My question is the NAT 64 policy from Sit-tunnel to IPv4 interface is authorized?

or Do i need to extend my topology with one more device for NAT64?

I am testing this topology with FG40C and FG60C with FortiOS5.2.

Thanks in advance.

Regards

arul

NAT64-4-SitTunnel.jpg

5.2

emnoc

New Member

The diag debug flow filter6 is your best friend ;) It will probably give or shed light into what the issue(s) are.

Ken

arulmozhiarasuAuthor

New Member

Hi EMNOC,

Thanks for your kind advice. By this diag debug i found the default NAT64 prefix is not routable, and i externally assigned other NAT64 prefix, and complete my test implementation.

Thanks Lot

arul

emnoc

New Member

1st you can started by detail of the FortiOS version your running?

For NAT64 it should be doable but problems in NAT64 has been id recently and more so than NAT66.

As far as authorized, it should be a supported feature minus the position of possible bugs and issues with regards to NAT64. Do a search here for a few examples of NAT64 issues

e.g

[link]https://forum.fortinet.com/tm.aspx?m=126176[/link]

Sign up

Login with SSO

Login to the community

Login with SSO