Fortinet black logo

CLI Reference

config system nat64

config system nat64

Configure NAT64.

config system nat64

Description: Configure NAT64.

set status [enable|disable]

set nat64-prefix {ipv6-prefix}

set secondary-prefix-status [enable|disable]

config secondary-prefix

Description: Secondary NAT64 prefix.

edit <name>

set nat64-prefix {ipv6-prefix}

next

end

set always-synthesize-aaaa-record [enable|disable]

set generate-ipv6-fragment-header [enable|disable]

set nat46-force-ipv4-packet-forwarding [enable|disable]

end

config system nat64

Parameter name

Description

Type

Size

status

Enable/disable NAT64 (default = disable).

option

-

Option

Description

enable

Enable NAT64.

disable

Disable NAT64.

nat64-prefix

NAT64 prefix must be ::/96 (default = 64:ff9b::/96).

ipv6-prefix

Not Specified

secondary-prefix-status

Enable/disable secondary NAT64 prefix.

option

-

Option

Description

enable

Enable secondary NAT64.

disable

Disable secondary NAT64.

always-synthesize-aaaa-record

Enable/disable AAAA record synthesis (default = enable).

option

-

Option

Description

enable

Enable AAAA record synthesis.

disable

Disable AAAA record synthesis.

generate-ipv6-fragment-header

Enable/disable IPv6 fragment header generation.

option

-

Option

Description

enable

Enable IPv6 fragment header generation.

disable

Disable IPv6 fragment header generation.

nat46-force-ipv4-packet-forwarding

Enable/disable mandatory IPv4 packet forwarding in nat46.

option

-

Option

Description

enable

Enable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

disable

Disable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

Parameter name

Description

Type

Size

nat64-prefix

NAT64 prefix.

ipv6-prefix

Not Specified

config system nat64

Configure NAT64.

config system nat64

Description: Configure NAT64.

set status [enable|disable]

set nat64-prefix {ipv6-prefix}

set secondary-prefix-status [enable|disable]

config secondary-prefix

Description: Secondary NAT64 prefix.

edit <name>

set nat64-prefix {ipv6-prefix}

next

end

set always-synthesize-aaaa-record [enable|disable]

set generate-ipv6-fragment-header [enable|disable]

set nat46-force-ipv4-packet-forwarding [enable|disable]

end

config system nat64

Parameter name

Description

Type

Size

status

Enable/disable NAT64 (default = disable).

option

-

Option

Description

enable

Enable NAT64.

disable

Disable NAT64.

nat64-prefix

NAT64 prefix must be ::/96 (default = 64:ff9b::/96).

ipv6-prefix

Not Specified

secondary-prefix-status

Enable/disable secondary NAT64 prefix.

option

-

Option

Description

enable

Enable secondary NAT64.

disable

Disable secondary NAT64.

always-synthesize-aaaa-record

Enable/disable AAAA record synthesis (default = enable).

option

-

Option

Description

enable

Enable AAAA record synthesis.

disable

Disable AAAA record synthesis.

generate-ipv6-fragment-header

Enable/disable IPv6 fragment header generation.

option

-

Option

Description

enable

Enable IPv6 fragment header generation.

disable

Disable IPv6 fragment header generation.

nat46-force-ipv4-packet-forwarding

Enable/disable mandatory IPv4 packet forwarding in nat46.

option

-

Option

Description

enable

Enable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

disable

Disable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

Parameter name

Description

Type

Size

nat64-prefix

NAT64 prefix.

ipv6-prefix

Not Specified