Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

[tamilvanan]

Hi Everyone,

We had recently bought an ISP connectivity and we had got the IPv6 address.

When we configure natting for IPV6 host to ISP IPv6 IP address it is working but we need to provide internet access to IPv4 devices on our environment.

We need to know whether it is possible to perform Source NAT translation of IPv4 LAN network devices  to IPv6 addresses of my public ISP.

Let's say an user is accessing google.com {Host IPv4 Private IP--->Firewall(IPv4-->translated to ISP provided Public IPv6 address)--->google server}

Thanks in advance.

[BPry]

@tamilvanan,

Your clients having IPv4 addresses will still receive IPv4 results they won't be able to reach if you don't have any public IPv4 space. Ensure that your clients are even getting AAAA records when they resolve DNS and they aren't only receiving A records. In all honesty if you don't have any public IPv4 addresses, it's time to cutover to full IPv6 internally as well. You don't have a way to reach any IPv4 host, so running it internally in a dual-stack network doesn't really make a lot of sense. 

The firewall can handle the NAT64 side of things without any issue, but you need another solution for your DNS64.You still need an IPv4 enabled host to be able to communicate though, so this isn't worth setting up if you only have IPv6 public space.