Greetings! I have achieved part of the translation. My internal ipv4 clients could access the website on the ipv6 server, but the external ipv4 client can not. My ipv4 address on the internet side is private, my ISP is using CGNAT.
Here my current config:
ip dhcp snooping vlan 1
ip dhcp snooping
ip name-server FE80::1A03:73FF:FEB0:9DAE
ip name-server 2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE
ip name-server 192.168.7.1
ip name-server 10.10.85.3
ip cef
ipv6 unicast-routing
ipv6 cef
ipv6 dhcp pool INTRANETv6
dns-server FE80::1A03:73FF:FEB0:9DAE
dns-server 2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE
!
!
!
multilink bundle-name authenticated
chat-script cdma "" "atdt#777" TIMEOUT 60 "CONNECT"
license udi pid C887VAG-S-K9 sn FTX17318514
!
!
object-group network local_lan_subnets
10.10.85.0 255.255.255.128
!
!
controller VDSL 0
operating mode adsl2+ annex A
sync mode itu
sra
!
controller Cellular 0
!
!
!
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
description DSL_Connection
no ip redirects
no ip unreachables
no ip proxy-arp
pvc 8/81
tx-ring-limit 2
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
switchport mode access
no ip address
duplex full
speed 100
spanning-tree portfast
ip dhcp snooping trust
!
interface FastEthernet1
switchport mode trunk
no ip address
duplex full
speed 100
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Cellular0
no ip address
encapsulation ppp
no logging event link-status
shutdown
dialer in-band
dialer string cdma
!
interface Vlan1
ip address 10.10.85.55 255.255.255.128
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
nat64 enable
!
interface Vlan2
no ip address
nat64 enable
ipv6 address INFINITUM-PD ::1/64
ipv6 enable
ipv6 tcp adjust-mss 1432
!
interface Dialer1
description INFINITUM_WAN
mtu 1492
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
no cdp enable
nat64 enable
ipv6 address autoconfig default
ipv6 enable
ipv6 mtu 1472
no ipv6 redirects
no ipv6 unreachables
ipv6 tcp adjust-mss 1432
ipv6 dhcp client pd INFINITUM-PD rapid-commit
ppp mtu adaptive
ppp authentication chap pap callin
ppp chap hostname username
ppp chap password 0 password
ppp pap sent-username username password 0 password
ppp ipcp dns reject
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list nat-list interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1 permanent
!
ip access-list extended nat-list
permit icmp object-group local_lan_subnets any
permit ip object-group local_lan_subnets any
permit tcp object-group local_lan_subnets any
permit udp object-group local_lan_subnets any
deny ip any any
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipv6 permit
nat64 prefix stateful 2806:109F:1A::/96
nat64 v6v4 static 2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE 192.168.7.1
ipv6 ioam timestamp
!
access-list 23 permit 10.10.85.0 0.0.0.7
!
ipv6 access-list nat64acl
sequence 1 permit ipv6 2806:109F:1A::/64 any
!
With that configuration all the internal IPv4 Clienst can access my IPv6 website. But external IPv4 clients could not. On the IPv6 side, all internal and external could access the website.
Here the sh nat64 statis results:
NAT64 Statistics
Number of NAT64 enabled interfaces: 3
Number of packets translated by stateless NAT64:
Packets translated (IPv4 -> IPv6): 0
Packets translated (IPv6 -> IPv4): 0
Number of packets translated by stateful NAT64:
Packets translated (IPv4 -> IPv6): 511
Packets translated (IPv6 -> IPv4): 494
Number of packets translated by MAP-T:
Packets translated (IPv4 -> IPv6): 0
Packets translated (IPv6 -> IPv4): 0
Number of packets processed by MAP-E:
Packets processed (IPv4 -> IPv6): 0
Packets processed (IPv6 -> IPv4): 0
Global Statistics
Prefix: 64:FF9B::/96
Packets translated (IPv4 -> IPv6): 0
Packets translated (IPv6 -> IPv4): 0
Packets dropped: 0
Prefix: 2806:109F:1A::/96
Packets translated (IPv4 -> IPv6): 41
Packets translated (IPv6 -> IPv4): 21
Packets dropped: 0
Interface Statistics
Total active translations: 1(1 static, 0 dynamic,0 extended)
Active sessions: 0
Number of expired entries: 62
Number of packets:
CEF Translated: 1005 CEF Punted packets: 0
Dropped: 5
Hits: 943 Misses: 62
Dynamic Mapping Statistics
Limit Statistics
Maximum entries limit not configured
And my sh nat64 trans, only triggered when internal IPv4 client access the IPv6 website; althouhg it doesn´t triggers when outside IPv4 clients tries to access:
Proto Original IPv4 Translated IPv4
Translated IPv6 Original IPv6
--------------------------------------------------------
tcp 10.10.85.5:56342 [2806:109F:1A::A0A:5505]:56342
192.168.7.1:80 [2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE]:80
tcp 10.10.85.5:56343 [2806:109F:1A::A0A:5505]:56343
192.168.7.1:80 [2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE]:80
tcp 10.10.85.5:56359 [2806:109F:1A::A0A:5505]:56359
192.168.7.1:80 [2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE]:80
tcp 10.10.85.5:56360 [2806:109F:1A::A0A:5505]:56360
192.168.7.1:80 [2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE]:80
--- --- ---
192.168.7.1 2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE
Notes:
Server IPv6 address
2806:109F:1A:F06D:1A03:73FF:FEB0:9DAE
IPv4 address on Dialer Interface (My ISP applied CGNAT):
10.134.190.182/32
The shared Public Address.
187.136.102.38
Also I´m using Ubuntu 22.04, with Bind9 as DNS64 server, and Apache for Webserver.
Thanks in advanced.
