combined ipv4 & ipv6 policy & nat

Charlez79 · ‎03-06-2024

Hi, is there a way to disable nat on ipv6 when using combined policies (ipv4 & ipv6).

There is only 1 checkbox to enable/disable nat. This implies to both ipv4 & ipv6.

For ipv6 of course you don't want nat.

Fortios is 7.4.3

thx

AlexC-FTNT · ‎03-07-2024

Hi @Charlez79 ,

Thank you for your question.

Managing a policy that has separate NAT for ipv4 and off for ipv6 would prove difficult from many points of view (think of FortiManager, and commands that need to be changed/added - maybe "set nat4 enable" / "set nat6 enable"), and can easily create confusion in GUI. The better approach would be to have separate policy for ipv4 with NAT, and ipv6 without NAT. Consolidated policies are possibly used for very simple setups, for a more condensed view.

- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -

View solution in original post

AlexC-FTNT · ‎03-07-2024

Hi @Charlez79 ,

Thank you for your question.

Managing a policy that has separate NAT for ipv4 and off for ipv6 would prove difficult from many points of view (think of FortiManager, and commands that need to be changed/added - maybe "set nat4 enable" / "set nat6 enable"), and can easily create confusion in GUI. The better approach would be to have separate policy for ipv4 with NAT, and ipv6 without NAT. Consolidated policies are possibly used for very simple setups, for a more condensed view.

- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -

combined ipv4 & ipv6 policy & nat

Nominate a Forum Post for Knowledge Article Creation