topic Inbound NAT using IPV6 to ipv4 in General Topics

Inbound NAT using IPV6 to ipv4

Rajendranahak — Thu, 03 Sep 2020 03:06:53 GMT

Hi Team,

We want to use ipv6 on untrust interface and server has belong to DMZ zone with ipv4 address, before we have published my server over internet using only ipv4 to ipv4

Now i have query that-

1) what steps we have to prefer to achieve inbound NAT from ipv6 to ipv4.

2) If i will configure ipv6 on untrust interface should we establish global protect tunnel or we will face any challenge.

Re: Inbound NAT using IPV6 to ipv4

BPry — Thu, 03 Sep 2020 16:37:17 GMT

@Rajendranahak,

What you are looking for is a NAT64 NAT rulebase entry. The configuration is essentially what you are used to currently, it's just a different NAT Type that you need to select. Once you add the IPv6 address to your untrust interface that won't have any effect on your existing GlobalProtect configuration.

Re: Inbound NAT using IPV6 to ipv4

Rajendranahak — Sun, 11 Oct 2020 06:29:01 GMT

I have published my my sever over internet if i will change public ip address to ipv6 and will create inbound NAT64 is it will work.

Re: Inbound NAT using IPV6 to ipv4

Ketan_Bhadra — Thu, 28 Mar 2024 05:23:00 GMT

Please help with Document if you were able to NAT from IPV6 ip on untrust interface to Private IPv4 Address Server in Trust Zone

Re: Inbound NAT using IPV6 to ipv4

PavelK — Thu, 28 Mar 2024 23:10:59 GMT

Hello @Ketan_Bhadra

thanks for post.

This question came up in this community before: https://live.paloaltonetworks.com/t5/general-topics/does-nat64-works-for-inbound-nat/td-p/436189. Could you check that thread?

Kind Regards

Pavel