HP VPN Firewall Appliances NAT and ALG Configuration Guide

37
NAT-PT supports ICMP, DNS, FTP, and other protocols that employ the network layer protocol but have
no address information in the protocol messages.
Protocols and standards
• RFC 2765, Stateless IP/ICMP Translation Algorithm
• RFC 2766, Network Address Translation - Protocol Translation (NAT-PT)
NAT-PT configuration task list
Complete the following tasks to configure NAT-PT to allow active access from an IPv4 host to an IPv6 host:
Task Remarks
Enabling NAT-PT Required.
Configuring a NAT-PT prefix Required.
Configuring IPv4/IPv6 address mappings on the IPv6 side Required.
Configuring a static mapping on the IPv4 side
Optional.
If no static IPv4/IPv6 address mapping is
configured, the lowest 32 bits of the destination
IPv6 address is used as the translated destination
IPv4 address.
Setting the ToS field after NAT-PT translation Optional.
Complete the following tasks to configure NAT-PT to allow active access from an IPv4 host to an IPv6 host:
Task Remarks
Enabling NAT-PT Required.
Configuring a NAT-PT prefix Required.
Configuring IPv4/IPv6 address mappings on the IPv4 side
Optional.
If no IPv4/IPv6 address mapping is configured,
the source IPv4 address added with the first
configured NAT-PT prefix is used as the translated
source IPv6 address.
Configuring IPv4/IPv6 address mappings on the IPv4 side
Required.
Complete either task.
Configuring static NAPT-PT mappings of IPv6 servers
Setting the traffic class field after NAT-PT translation Optional.
Configuration prerequisites
Before you implement NAT-PT, complete the following tasks:
1. Enable IPv6 on the device. For more information, see Network Management Configuration Guide.
2. Configure an IPv4 or IPv6 address as required on the interface to be enabled with NAT-PT.