NAT-PT configuration

[CNicoletti]

Hi, i'm having some issues configuring a simple nat-pt. Unfortunately I'm not able to make the Client (172.17.0.2) communicate with the server (2001:db8:cafe::1). 

Router configuration:

interface Loopback0
 ip address 201.201.201.5 255.255.255.252
!
!
interface GigabitEthernet0/0
 no ip address
 duplex auto
 speed auto
 ipv6 address 2001:DB8:CAFE::2/64
 ipv6 enable
 ipv6 nat
!
interface GigabitEthernet0/1
 ip address 172.17.0.1 255.255.255.0
 duplex auto
 speed auto
 ipv6 enable
 ipv6 nat
!
!
 ip access-list standard NAT_TRAFFIC
 permit any
!
!
!
ipv6 nat v4v6 source list NAT_TRAFFIC pool IPV4_TO_IPV6
ipv6 nat v4v6 pool IPV4_TO_IPV6 2000::960B:150 2000::960B:250 prefix-length 96
ipv6 nat v6v4 source 2001:DB8:CAFE::30 201.201.201.5
ipv6 nat prefix 2000::/96

I tried with static nat, but it also doesn't work.

ipv6 nat v4v6 source 172.17.0.2 2000::960B:251
ipv6 nat v6v4 source 2001:DB8:CAFE::30 201.201.201.5
ipv6 nat prefix 2000::/96

Thanks in advance. :)

[violeta.matanovic1]

Try to add static ipv6 route for 2000::/96 via Gi0/0

Kind regards

[James Leinweber]

Better yet, if possible dual stack the inside subnet of the router and ditch the nat46 for native v6.  Even things as old as windows-XP can optionally do native v6 with SLAAC, though they need a v4 DNS server and won't do DHCPv6.

-- Jim Leinweber, WI State Lab of Hygiene

[CNicoletti]

Thanks for the answer. But it didn't work.

Actually I think the router didn't need a route to this network because the package should be translated to ipv4 before be routed to g0/0

[mlund · Accepted solution]

Hi

I did this a couple of years ago on c7200. To get it to work then, I had to disable cef for both ipv6 and ipv4.

Also something in my mind, I think I had to do "no ip route-cache", but not sure.

I think it had to do with no support for natpt in cef path, and also natpt was removed from fast-cache.

/Mikael

[CNicoletti]

Hi Mikael.

I did the lab again days ago and that's exactly what was missing apparently. But I'm not sure about the no ip route-cache.

For those who are trying to do a similar lab. Doesn't forget to enable IPv6 routing with the command ipv6 unicast-routing