Inbound NAT using IPV6 to ipv4

[Rajendranahak]

Hi Team,

We want to use ipv6 on untrust interface and server has belong to DMZ zone with ipv4 address, before we have published my server over internet using only ipv4 to ipv4 

Now i have query that-

1) what steps we have to prefer to achieve inbound NAT from ipv6 to ipv4.

2) If i will configure ipv6 on untrust interface should we establish global protect tunnel or we will face any challenge.

[BPry]

@Rajendranahak,

What you are looking for is a NAT64 NAT rulebase entry. The configuration is essentially what you are used to currently, it's just a different NAT Type that you need to select. Once you add the IPv6 address to your untrust interface that won't have any effect on your existing GlobalProtect configuration. 

[Rajendranahak]

I have published my my sever over internet if i will change public ip address to ipv6 and will create inbound NAT64 is it will work.

[Ketan_Bhadra]

Please help with Document if you were able to NAT from IPV6 ip on untrust interface to Private IPv4 Address Server in Trust Zone 

[PavelK]

Hello @Ketan_Bhadra

thanks for post.

This question came up in this community before: https://live.paloaltonetworks.com/t5/general-topics/does-nat64-works-for-inbound-nat/td-p/436189. Could you check that thread?

Kind Regards

Pavel