Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

tamilvanan — Fri, 25 Feb 2022 14:39:34 GMT

Hi Everyone,

We had recently bought an ISP connectivity and we had got the IPv6 address.

When we configure natting for IPV6 host to ISP IPv6 IP address it is working but we need to provide internet access to IPv4 devices on our environment.

We need to know whether it is possible to perform Source NAT translation of IPv4 LAN network devices to IPv6 addresses of my public ISP.

Let's say an user is accessing google.com {Host IPv4 Private IP--->Firewall(IPv4-->translated to ISP provided Public IPv6 address)--->google server}

Thanks in advance.

Re: Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

BPry — Fri, 25 Feb 2022 15:01:03 GMT

@tamilvanan,

Your clients having IPv4 addresses will still receive IPv4 results they won't be able to reach if you don't have any public IPv4 space. Ensure that your clients are even getting AAAA records when they resolve DNS and they aren't only receiving A records. In all honesty if you don't have any public IPv4 addresses, it's time to cutover to full IPv6 internally as well. You don't have a way to reach any IPv4 host, so running it internally in a dual-stack network doesn't really make a lot of sense.

The firewall can handle the NAT64 side of things without any issue, but you need another solution for your DNS64.You still need an IPv4 enabled host to be able to communicate though, so this isn't worth setting up if you only have IPv6 public space.

topic Re: Does Palo Alto Support IPv6 source NAtting for IPV4 addresses in General Topics

Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

Re: Does Palo Alto Support IPv6 source NAtting for IPV4 addresses