system nat64

Use this command to configure NAT64 options, including secondary IPv6 prefixes to support dynamic NAT46/64 IP pool.

History

The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.

Command	Description
set secondary-prefix-status {enable | disable} config secondary-prefix ...	Configure secondary IPv6 prefixes to be used in policies to give the configuration of addresses more options. Note that the default prefix must have a length of 96, but the secondary prefixes can be different lengths. To use the IP pool in NAT46 policies, enable the use of IP pools in firewall {policy46 | policy64}.

config system nat64
    set status {enable | disable}   Enable/disable NAT64 (default = disable).
    set nat64-prefix {ipv6 prefix}   NAT64 prefix must be ::/96 (default = 64:ff9b::/96).
    set secondary-prefix-status {enable | disable}   Enable/disable secondary NAT64 prefix.
    config secondary-prefix
        edit {name}
        # Secondary NAT64 prefix.
            set name {string}   NAT64 prefix name. size[35]
            set nat64-prefix {ipv6 prefix}   NAT64 prefix.
        next
    set always-synthesize-aaaa-record {enable | disable}   Enable/disable AAAA record synthesis (default = enable).
    set generate-ipv6-fragment-header {enable | disable}   Enable/disable IPv6 fragment header generation.
    set nat46-force-ipv4-packet-forwarding {enable | disable}   Enable/disable mandatory IPv4 packet forwarding in nat46.
end