Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

L3 Networker

Hi Everyone,

 

We had recently bought an ISP connectivity and we had got the IPv6 address.

 

When we configure natting for IPV6 host to ISP IPv6 IP address it is working but we need to provide internet access to IPv4 devices on our environment.

 

We need to know whether it is possible to perform Source NAT translation of IPv4 LAN network devices  to IPv6 addresses of my public ISP.

 

Let's say an user is accessing google.com {Host IPv4 Private IP--->Firewall(IPv4-->translated to ISP provided Public IPv6 address)--->google server}

 

Thanks in advance.

 

1 REPLY 1

Cyber Elite
Cyber Elite

@tamilvanan,

Your clients having IPv4 addresses will still receive IPv4 results they won't be able to reach if you don't have any public IPv4 space. Ensure that your clients are even getting AAAA records when they resolve DNS and they aren't only receiving A records. In all honesty if you don't have any public IPv4 addresses, it's time to cutover to full IPv6 internally as well. You don't have a way to reach any IPv4 host, so running it internally in a dual-stack network doesn't really make a lot of sense. 

The firewall can handle the NAT64 side of things without any issue, but you need another solution for your DNS64.You still need an IPv4 enabled host to be able to communicate though, so this isn't worth setting up if you only have IPv6 public space. 

  • 1546 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!