topic Re: IPV6 network should connect to Check Point IPV4 Network in Firewall and Security Management

IPV6 network should connect to Check Point IPV4 Network

Man0j — Thu, 25 Mar 2021 17:35:40 GMT

Dear Mates,

My customer has IPV4 Network under his Check Point cluster. My customer has a client who is with IPV6 Network. Now, this client with IPV6 network should connect to a web application which is under Check Point IPv4 Network.

Please guide me on how to achieve this.

Re: IPV6 network should connect to Check Point IPV4 Network

PhoneBoy — Thu, 25 Mar 2021 22:12:37 GMT

An IPv6 host needs to connect with an IPv4 one?
This is called NAT64 and you can configure it in the NAT rulebase.

Re: IPV6 network should connect to Check Point IPV4 Network

the_rock — Thu, 25 Mar 2021 23:23:18 GMT

I think what @PhoneBoy said makes total sense. I recall doing something similar while ago.

Andy

Re: IPV6 network should connect to Check Point IPV4 Network

Man0j — Fri, 26 Mar 2021 05:18:57 GMT

Can you please help me how to configure this along with pre-requisites for a cluster environment.

For example , I will need 3 IPV6 IPs for cluster to write a NAT Rule to translate from the external IPV6 Network to IPV4 right ?

Re: IPV6 network should connect to Check Point IPV4 Network

PhoneBoy — Fri, 26 Mar 2021 07:23:59 GMT

I would make sure to review https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163313 to ensure you can support NAT64 (basically R80.30 and R80.40 prior to JHF 83 don't support).
See also the product documentation: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/NAT-Rules.htm?Highlight=nat64