F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100

38
Task Remarks
269H
Configuring IPv4/IPv6 address mappings on the IPv4 side
Required.
Complete either task.
270H
Configuring static NAPT-PT mappings of IPv6 servers
271H
Setting the traffic class field after NAT-PT translation Optional.
14B
Configuration prerequisites
Before you implement NAT-PT, complete the following tasks:
1. Enable IPv6 on the device. For more information, see Network Management Configuration Guide.
2. Configure an IPv4 or IPv6 address as required on the interface to be enabled with NAT-PT.
15B
Enabling NAT-PT
After NAT-PT is enabled on both the IPv4 network interface and the IPv6 network interface, the device
can implement translation between IPv4 and IPv6 addresses.
Follow these guidelines when you enable NAT-PT:
• The natpt enable command enables both NAT-PT and Address Family Translation (AFT). For
information about AFT, see VPN Configuration Guide.
• Do not configure NAT-PT mapping policies and AFT policies on the same device.
To enable NAT-PT:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type interface-number N/A
3. Enable NAT-PT on the interface. natpt enable Disabled by default.
16B
Configuring a NAT-PT prefix
Follow these guidelines when you configure a NAT-PT prefix:
• The NAT-PT prefix must be different from the IPv6 address prefix of a local interface. Otherwise,
incoming packets matching the prefix get lost due to NAT-PT translation.
• To delete a NAT-PT prefix that has been referenced by using the natpt v4bound dynamic or natpt
v6bound dynamic command, you must cancel the referenced configuration first.
To configure a NAT-PT prefix:
Ste
p
Command
1. Enter system view. system-view
2. Configure a NAT-PT prefix.
natpt prefix natpt-prefix [ interface interface-type
interface-number [ nexthop ipv4-address ] ]