Limitations and precautions for the NAT64

60

The limitations and precautions for the NAT64 are as follows:
When the triplet NAT64 is used, you must set the hash board selection mode to the source address-based hash. For details, see "Setting the Hash Board Selection Mode" in the firewall product documentation.

Other related questions:
Limitations and precautions for the USG9000
The limitations and precautions for the USG9500 are as follows: -The USG9500 supports license application based on the ESN of the MPU or the backplane. It is recommended that the ESN of the backplane be used to apply for a license. Because you need to apply for a license again if you replace a faulty MPU whose ESN is used to apply for a license. -In dual-MPU mode, if you use the ESN of an MPU to apply for a license, you must provide the ESNs of both active and standby MPUs. -In dual-MPU mode, the license files, license file names, and license file storage paths of both MPUs must be the same. Otherwise, service interruption may occur upon MPU switchover.

What are limitations and precautions for IPv6 over IPv4 tunnels.
Limitations and precautions for IPv6 over IPv4 tunnels are as follows: -Dynamic routing protocols supported by IPv6 over IPv4 manual tunnels are RIPng, OSPFv3, and BGP4+. -Dynamic routing protocols supported by IPv6 over IPv4 GRE tunnels are RIPng, OSPFv3, and BGP4+. -Dynamic routing protocol supported by IPv6 over IPv4 automatic tunnels is BGP4+. -Dynamic routing protocol supported by 6to4 tunnels is BGP4+. -Dynamic routing protocol supported by 6RD tunnels is BGP4+. -Dynamic routing protocol supported by ISATAP tunnels is BGP4+.

Method used to set the NAT64 prefix on the USG2000 and USG5000 series
The USG2000 and USG5000 series determine the implementation of NAT64 processing on an IPv6 packet by checking whether the destination address of the IPv6 packet contains the NAT64 prefix. The NAT64 prefix is classified into the following types: Well-known prefix: 64:FF9B::/96 User-defined prefix: The prefix can contain 32, 40, 48, 56, 64, or 96 bits. The position where an IPv4 address is embedded in an IPv6 address varies depending on prefix lengths. The rules are as follows: When the prefix has 32 bits, the IPv4 address is embedded in bits 32-63 in the IPv6 address. When the prefix has 40 bits, 24 bits of the IPv4 address are embedded in bits 40-63 in the IPv6 address, and the remaining 8 bits of the IPv4 address are embedded in bits 72-79 in the IPv6 address. When the prefix has 48 bits, 16 bits of the IPv4 address are embedded in bits 48-63 in the IPv6 address, and the remaining 16 bits of the IPv4 address are embedded in bits 72-87 in the IPv6 address. When the prefix has 56 bits, 8 bits of the IPv4 address are embedded in bits 56-63 in the IPv6 address, and the remaining 24 bits of the IPv4 address are embedded in bits 72-95 in the IPv6 address. When the prefix has 64 bits, the IPv4 address is embedded in bits 72-103 in the IPv6 address. When the prefix has 96 bits, the IPv4 address is embedded in bits 96-127 in the IPv6 address. Taking IPv4 address 192.168.0.1 and NAT prefix 3000::/64 as an example, the IPv6 address corresponding to this IPv4 is 3000:0000:0000:0000:00C0:A800:0100:0000, that is, 3000::C0:A800:100:0. Configure the NAT64 prefix as follows: 1. In the user view, run the system-view command to enter the system view. 2. Run the nat64 prefix prefix prefix-length command to configure the NAT64 prefix.

Method used to set the NAT64 prefix on the USG6000 series
The USG6000 series determine the implementation of NAT64 processing on an IPv6 packet by checking whether the destination address of the IPv6 packet contains the NAT64 prefix. The NAT64 prefix is classified into the following types: Well-known prefix: 64:FF9B::/96 User-defined prefix: The prefix can contain 32, 40, 48, 56, 64, or 96 bits. The position where an IPv4 address is embedded in an IPv6 address varies depending on prefix lengths. The rules are as follows: When the prefix has 32 bits, the IPv4 address is embedded in bits 32-63 in the IPv6 address. When the prefix has 40 bits, 24 bits of the IPv4 address are embedded in bits 40-63 in the IPv6 address, and the remaining 8 bits of the IPv4 address are embedded in bits 72-79 in the IPv6 address. When the prefix has 48 bits, 16 bits of the IPv4 address are embedded in bits 48-63 in the IPv6 address, and the remaining 16 bits of the IPv4 address are embedded in bits 72-87 in the IPv6 address. When the prefix has 56 bits, 8 bits of the IPv4 address are embedded in bits 56-63 in the IPv6 address, and the remaining 24 bits of the IPv4 address are embedded in bits 72-95 in the IPv6 address. When the prefix has 64 bits, the IPv4 address is embedded in bits 72-103 in the IPv6 address. When the prefix has 96 bits, the IPv4 address is embedded in bits 96-127 in the IPv6 address. Taking IPv4 address 192.168.0.1 and NAT prefix 3000::/64 as an example, the IPv6 address corresponding to this IPv4 is 3000:0000:0000:0000:00C0:A800:0100:0000, that is, 3000::C0:A800:100:0. Configure the NAT64 prefix as follows: 1. In the user view, run the system-view command to enter the system view. 2. Run the nat64 prefix prefix prefix-length command to configure the NAT64 prefix.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top