topic Re: Two NAT64 rules in Firewall and Security Management

Two NAT64 rules

Farkhad_Mameto1 — Thu, 18 Jan 2018 03:09:34 GMT

Hi Team! Could you kindly help me? 🙂

fwm ver
This is Check Point Security Management Server R77.30 - Build 035
Installed Plug-ins: R77.20 Add-on, R77.30 Add-on

I have faced with problem when trying to install 2 rules.

First rule - embedded NAT64 translation for users who has only IPv6 addresses to reach IPv4 networks

Second rule - Static NAT64 for external IPv6 users who have to reach IPv4 site on the local network which has no IPv6 address

Rules:

Errors appear when I am trying to install policy:

When I disable one of the rules - policy installing normally

Re: Two NAT64 rules

PhoneBoy — Fri, 21 Jun 2019 09:11:53 GMT

I believe your second rule is incorrectly defined.

However, I discussed the correct way to create that rule here: https://community.checkpoint.com/message/9501-re-ipv6-with-checkpoint-r7730

Re: Two NAT64 rules

Farkhad_Mameto1 — Thu, 18 Jan 2018 07:28:49 GMT

Thank you for answer!

But each rule works fine if disable one of these. For example, when i disabling rule 1, policy would install normally and second rule works fine and vice versa

Re: Two NAT64 rules

Farkhad_Mameto1 — Thu, 18 Jan 2018 10:01:14 GMT

And I've created rule 2 as your described in IPv6 with Checkpoint R77.30

Only one thing, when I replace translated destination address to IPv4_Site it change from "64" to "s". But this rule works fine (if disabling rule one)

Re: Two NAT64 rules

PhoneBoy — Thu, 18 Jan 2018 15:04:39 GMT

Have you opened a ticket with TAC on this?

It could very well be some sort of policy validation bug that we need to investigate further.

Contact Support | Check Point Software