Method used to set the NAT64 prefix on the USG2000 and USG5000 series

9

The USG2000 and USG5000 series determine the implementation of NAT64 processing on an IPv6 packet by checking whether the destination address of the IPv6 packet contains the NAT64 prefix. The NAT64 prefix is classified into the following types:

Well-known prefix: 64:FF9B::/96

User-defined prefix: The prefix can contain 32, 40, 48, 56, 64, or 96 bits.

The position where an IPv4 address is embedded in an IPv6 address varies depending on prefix lengths. The rules are as follows:
When the prefix has 32 bits, the IPv4 address is embedded in bits 32-63 in the IPv6 address.
When the prefix has 40 bits, 24 bits of the IPv4 address are embedded in bits 40-63 in the IPv6 address, and the remaining 8 bits of the IPv4 address are embedded in bits 72-79 in the IPv6 address.
When the prefix has 48 bits, 16 bits of the IPv4 address are embedded in bits 48-63 in the IPv6 address, and the remaining 16 bits of the IPv4 address are embedded in bits 72-87 in the IPv6 address.
When the prefix has 56 bits, 8 bits of the IPv4 address are embedded in bits 56-63 in the IPv6 address, and the remaining 24 bits of the IPv4 address are embedded in bits 72-95 in the IPv6 address.
When the prefix has 64 bits, the IPv4 address is embedded in bits 72-103 in the IPv6 address.
When the prefix has 96 bits, the IPv4 address is embedded in bits 96-127 in the IPv6 address.
Taking IPv4 address 192.168.0.1 and NAT prefix 3000::/64 as an example, the IPv6 address corresponding to this IPv4 is 3000:0000:0000:0000:00C0:A800:0100:0000, that is, 3000::C0:A800:100:0.

Configure the NAT64 prefix as follows:
1. In the user view, run the system-view command to enter the system view.
2. Run the nat64 prefix prefix prefix-length command to configure the NAT64 prefix.

Other related questions:
Method used to set the NAT64 prefix on the USG6000 series
The USG6000 series determine the implementation of NAT64 processing on an IPv6 packet by checking whether the destination address of the IPv6 packet contains the NAT64 prefix. The NAT64 prefix is classified into the following types: Well-known prefix: 64:FF9B::/96 User-defined prefix: The prefix can contain 32, 40, 48, 56, 64, or 96 bits. The position where an IPv4 address is embedded in an IPv6 address varies depending on prefix lengths. The rules are as follows: When the prefix has 32 bits, the IPv4 address is embedded in bits 32-63 in the IPv6 address. When the prefix has 40 bits, 24 bits of the IPv4 address are embedded in bits 40-63 in the IPv6 address, and the remaining 8 bits of the IPv4 address are embedded in bits 72-79 in the IPv6 address. When the prefix has 48 bits, 16 bits of the IPv4 address are embedded in bits 48-63 in the IPv6 address, and the remaining 16 bits of the IPv4 address are embedded in bits 72-87 in the IPv6 address. When the prefix has 56 bits, 8 bits of the IPv4 address are embedded in bits 56-63 in the IPv6 address, and the remaining 24 bits of the IPv4 address are embedded in bits 72-95 in the IPv6 address. When the prefix has 64 bits, the IPv4 address is embedded in bits 72-103 in the IPv6 address. When the prefix has 96 bits, the IPv4 address is embedded in bits 96-127 in the IPv6 address. Taking IPv4 address 192.168.0.1 and NAT prefix 3000::/64 as an example, the IPv6 address corresponding to this IPv4 is 3000:0000:0000:0000:00C0:A800:0100:0000, that is, 3000::C0:A800:100:0. Configure the NAT64 prefix as follows: 1. In the user view, run the system-view command to enter the system view. 2. Run the nat64 prefix prefix prefix-length command to configure the NAT64 prefix.

Method used to clear the configuration (restoring the factory settings) on the USG2000, USG5000, and USG6000.
The method used to clear the configuration *restoring the factory settings) on USG firewalls is as follows: 1. Hardware methods: Press and hold the RESET button on the device to boot based on the default configuration. Note: It is recommended that you press and hold the RESET button to restore to the default factory settings before the system is powered on. Note the following: You must press the RESET button for more than 10s. Release the RESET button before the system prompts to press Ctrl+B. You can restore the default configuration as follows: If the device is not powered on, press the RESET button and then power on the device. When six indicators on the panel blink at a frequency of about 2 Hz, release the RESET button. The device will boot using the default configuration. If the device is powered on, press and hold the RESET button and then release it in 10s. When you press Ctrl+B, six indicators on the panel blink at a frequency of about 2 Hz, indicating that the device successfully restores to the factory settings. Note: Before powering on the device, press and hold the RESET button. If the indicators blink immediately after you release the button, the button is successfully activated. You must release the RESET button in 10s after the device is powered on. Indicators blink only when the system prompts to press Ctrl+B instead of immediately blinking after the button is released. Do not press the RESET button for multiple times during the system boot. Otherwise, the system fails to restore the default configuration. After the system prompts to press Ctrl+B, if you press the RESET button during system boot or running, the system is not restarted and does not restore to default factory settings. It is recommended that you save the current configuration before pressing the RESET button. 2. Web UI: For the USG2000 and USG5000, on the web UI, choose System > Maintenance > Configuration Management, and click Restore Factory Configuration. For the USG6000, on the Web UI, choose System > Profile Management, and click Restore Factory Configuration. 3. CLI: reset saved-configuration (Clear the saved configuration.) 10:25:15 2015/03/13 The action will delete the saved configuration in the device. The configuration will be erased to reconfigure. Are you sure?[Y/N]y (The configuration will be cleared. Confirm? Press Y.) Now clearing the configuration in the device. 2015-03-13 10:25:19 FW %%01CFM/4/RST_CFG(l): When deciding whether to reset the saved configuration, the user presses Y. Info:Clear the configuration in the device successfully (Successfully cleared) reboot (Restart the device.) 10:25:31 2015/03/13 System will reboot, could you want to save current configuration [Y/N]?n (The system will restart. Save the current configuration? Press N. If you press Y, the original configuration is saved again and the configuration is not cleared.) System will reboot! Continue?[Y/N]:y (The device will restart. Press Y.) After the device is restarted, the configuration is cleared.

Method used to restore the factory settings of the USG2000 and USG5000 on the web UI
You can restore the factory settings on the web UI as follows: The restoration to the factory settings does not affect the saved profiles. 1. Choose System > Profile Management. The information in Current Configuration is the current configuration information. 2. Click Restore factory settings.

Method used to configure ISATAP tunnels on the USG2000 and USG5000 series
On the USG2000 and USG5000 series, configure the ISATAP tunnel as follows: USG_A is a boundary device on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting USG_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of the host PC is 1.1.1.2/24. An ISATAP tunnel is established between USG_A and the PC. 1. Configure the tunnel encapsulation type, source address, and ISATAP address prefix of the tunnel interface of USG_A. system-view [USG] sysname USG_A [USG_A] ipv6 [USG_A] interface tunnel 1 [USG_A-Tunnel1] tunnel-protocol ipv6-ipv4 isatap [USG_A-Tunnel1] ipv6 enable [USG_A-Tunnel1] source 1.1.1.1 [USG_A-Tunnel1] ipv6 address 3001:: 64 eui-64 [USG_A-Tunnel1] undo ipv6 nd ra halt 2. Assume that the host PC adopts the Microsoft Windows XP Professional system. The IPv4 address configured for the host is 1.1.1.2/24. Install the IPv6 protocol on the PC, so that the PC can obtain ISATAP address prefix 3001::/64 from USG_A.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top