Thank you for the post @AhamadullahM
The purpose of NAT64 is to enable IPv6 only clients to communicate with IPv4 only resources: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIFCA0 Based on what you have described, you have opposite scenario. You have IPv4 only client to access IPv6 only network. The NAT64 will unfortunately not work in this case.
Hi @AhamadullahM ,
Is this the scenario you're looking for ?:
I hope it helps,
Thank you for the reply @AhamadullahM
I am sorry, unfortunately I do not have any hands on experience with NAT46, but on best effort bases I would advice following. Since Palo Alto Firewall does not support NAT46, I would connect IPv6 only ISP link to a router that supports NAT46 (For example Cisco ISR router or Juniper SRX), then let this device do a routing + NAT. The Palo Alto would be connected behind this router for the rest of the functionality (Firewall Features).
If it is technically doable, I would consider dual stack to configure IPv6 between your Firewall and your hosts.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!