Fortinet black logo

CLI Reference

config system nat64

config system nat64

Configure NAT64.

config system nat64
    Description: Configure NAT64.
    set always-synthesize-aaaa-record [enable|disable]
    set generate-ipv6-fragment-header [enable|disable]
    set nat46-force-ipv4-packet-forwarding [enable|disable]
    set nat64-prefix {ipv6-prefix}
    config secondary-prefix
        Description: Secondary NAT64 prefix.
        edit <name>
            set name {string}
            set nat64-prefix {ipv6-prefix}
        next
    end
    set secondary-prefix-status [enable|disable]
    set status [enable|disable]
end

config system nat64

Parameter

Description

Type

Size

Default

always-synthesize-aaaa-record

Enable/disable AAAA record synthesis.

option

-

enable

Option

Description

enable

Enable AAAA record synthesis.

disable

Disable AAAA record synthesis.

generate-ipv6-fragment-header

Enable/disable IPv6 fragment header generation.

option

-

disable

Option

Description

enable

Enable IPv6 fragment header generation.

disable

Disable IPv6 fragment header generation.

nat46-force-ipv4-packet-forwarding

Enable/disable mandatory IPv4 packet forwarding in nat46.

option

-

disable

Option

Description

enable

Enable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

disable

Disable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

nat64-prefix

NAT64 prefix must be ::/96.

ipv6-prefix

Not Specified

64:ff9b::/96

secondary-prefix-status

Enable/disable secondary NAT64 prefix.

option

-

disable

Option

Description

enable

Enable secondary NAT64.

disable

Disable secondary NAT64.

status

Enable/disable NAT64.

option

-

disable

Option

Description

enable

Enable NAT64.

disable

Disable NAT64.

config secondary-prefix

Parameter

Description

Type

Size

Default

name

NAT64 prefix name.

string

Not Specified

nat64-prefix

NAT64 prefix.

ipv6-prefix

Not Specified

::/0

config system nat64

Configure NAT64.

config system nat64
    Description: Configure NAT64.
    set always-synthesize-aaaa-record [enable|disable]
    set generate-ipv6-fragment-header [enable|disable]
    set nat46-force-ipv4-packet-forwarding [enable|disable]
    set nat64-prefix {ipv6-prefix}
    config secondary-prefix
        Description: Secondary NAT64 prefix.
        edit <name>
            set name {string}
            set nat64-prefix {ipv6-prefix}
        next
    end
    set secondary-prefix-status [enable|disable]
    set status [enable|disable]
end

config system nat64

Parameter

Description

Type

Size

Default

always-synthesize-aaaa-record

Enable/disable AAAA record synthesis.

option

-

enable

Option

Description

enable

Enable AAAA record synthesis.

disable

Disable AAAA record synthesis.

generate-ipv6-fragment-header

Enable/disable IPv6 fragment header generation.

option

-

disable

Option

Description

enable

Enable IPv6 fragment header generation.

disable

Disable IPv6 fragment header generation.

nat46-force-ipv4-packet-forwarding

Enable/disable mandatory IPv4 packet forwarding in nat46.

option

-

disable

Option

Description

enable

Enable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

disable

Disable mandatory IPv4 packet forwarding when IPv4 DF is set to 1.

nat64-prefix

NAT64 prefix must be ::/96.

ipv6-prefix

Not Specified

64:ff9b::/96

secondary-prefix-status

Enable/disable secondary NAT64 prefix.

option

-

disable

Option

Description

enable

Enable secondary NAT64.

disable

Disable secondary NAT64.

status

Enable/disable NAT64.

option

-

disable

Option

Description

enable

Enable NAT64.

disable

Disable NAT64.

config secondary-prefix

Parameter

Description

Type

Size

Default

name

NAT64 prefix name.

string

Not Specified

nat64-prefix

NAT64 prefix.

ipv6-prefix

Not Specified

::/0