cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4162
Views
0
Helpful
4
Replies

IPv6 NAT: Dropping v6tov4 packet [NAT-PT]

Erik.Verkerk_2
Level 1
Level 1

Hi all,

I hope someone can help me out here with a NAT-PT configuration;

I configured IPv6 NAT-PT on a CISCO1941/K9 (version 15.0(1r)M9)

I cut/past the most important configuration from the router;

--

ipv6 unicast-routing

no ipv6 cef

--

interface GigabitEthernet0/0.888

ip address x.x.x.x 255.255.255.240

ipv6 address 2A02:D28:3030:1:1009::3/124

ipv6 enable

ipv6 nat prefix 2A02:D28:3030:101::/96

--

interface GigabitEthernet0/1.899

ip address 10.60.3.147 255.255.255.240

ipv6 nat prefix 2A02:D28:3030:101::/96

ipv6 nat

--

ipv6 route ::/0 2A02:D28:3030:1:1009::2

ipv6 nat v4v6 source 10.60.3.7 2A02:D28:3030:101::2

ipv6 nat v6v4 source 2A02:D28:3030:101::2 10.60.3.7

ipv6 nat prefix 2A02:D28:3030:101::/96

Problem is when I send an request to 2A02:D28:3030:101::2 on port 443 I get the messages in the router; [debug ipv6 nat detailed]

Jun 14 17:26:20.993: IPv6 NAT: IPv6->IPv4:
                 src (:: -> 0.0.0.0)
                 dst (2A02:D28:3030:101::2 -> 10.60.3.7)
                 ref_count = 1, usecount = 0, flags = 513,
                 rt_flags = 0, more_flags = 0

Jun 14 17:26:20.993: IPv6 NAT: Dropping v6tov4 packet
Jun 14 17:26:21.481: IPv6 NAT: Found prefix 2A02:D28:3030:101::/96

Hope someone can help me out here, what kind of configuration error did I made.

Thanks,

Erik.

4 Replies 4

Erik.Verkerk_2
Level 1
Level 1

Just for the information I want the webserver 10.60.3.7 be reachable by a IPv6 address on the internet

Hi all,

just for the guys who are interested.

The following configuration works;

see attach file nat-pt-txt

Bye.

Hi Erik,

 

Could you please let me know what IOS version you have used to configure this configurations.

I am also trying to configure a similiar setup but ipv6 nat command is not working in my cisco 1941 router.

I am using Cisco 1941 IPBase image

Hi Loganathan,

 

use data + security license and check

 

Thanks

Raju