system nat64
Use this command to configure NAT64 options, including secondary IPv6 prefixes to support dynamic NAT46/64 IP pool.
History
The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.
Command | Description |
---|---|
set secondary-prefix-status {enable | disable} config secondary-prefix ... |
Configure secondary IPv6 prefixes to be used in policies to give the configuration of addresses more options. Note that the default prefix must have a length of 96, but the secondary prefixes can be different lengths. To use the IP pool in NAT46 policies, enable the use of IP pools in |
config system nat64 set status {enable | disable} Enable/disable NAT64 (default = disable). set nat64-prefix {ipv6 prefix} NAT64 prefix must be ::/96 (default = 64:ff9b::/96). set secondary-prefix-status {enable | disable} Enable/disable secondary NAT64 prefix. config secondary-prefix edit {name} # Secondary NAT64 prefix. set name {string} NAT64 prefix name. size[35] set nat64-prefix {ipv6 prefix} NAT64 prefix. next set always-synthesize-aaaa-record {enable | disable} Enable/disable AAAA record synthesis (default = enable). set generate-ipv6-fragment-header {enable | disable} Enable/disable IPv6 fragment header generation. set nat46-force-ipv4-packet-forwarding {enable | disable} Enable/disable mandatory IPv4 packet forwarding in nat46. end