topic Re: IPsec VPN between IPv4 and IPv6 in General Topics

IPsec VPN between IPv4 and IPv6

Chinmaya_Naik — Wed, 09 Jan 2019 07:06:51 GMT

Hello Checkmates Team,

Is it possible to establish a IPsec VPN between IPv4 and IPv6 ?

Any Usecase ?

#Chinmaya Naik

Re: IPsec VPN between IPv4 and IPv6

Jerry — Wed, 09 Jan 2019 08:15:55 GMT

it all depends if you know how to use NAT's (ipv6->ipv4 and ipv4-ipv6) called NAT46 vs NAT64

have you searched UC Support sk's reg. IPv6 NATs ?

afaik R80.20 has full support for transporting ipv4 addresses out via ipv6 (I've used that in a lab and it works like a charm!) but reg. your question - I think there are more implications and conditions you need to meet before you do IPv6/IPv5 VPN. What is ultimately you goal mate?

Re: IPsec VPN between IPv4 and IPv6

Jerry — Wed, 09 Jan 2019 08:17:49 GMT

https://community.checkpoint.com/message/7384-ipv6-nat-support

Re: IPsec VPN between IPv4 and IPv6

Chinmaya_Naik — Wed, 09 Jan 2019 08:43:55 GMT

Thanks Jerry ,

So basically we are using R77.30 so if we do on NAT64 (Translate IPv6 addresses to IPv4 addresses (Supported in R77.30 ,requires R77.30 Add-On ) on one side then it should work right ?

#Chinmaya Naik

Re: IPsec VPN between IPv4 and IPv6

Jerry — Wed, 09 Jan 2019 09:10:10 GMT

uuu good one, I've never used NAT64/46 on R77.30 though as it never worked for me but speaking of which,

Dameon Welch-Abernathy‌ - what do you think? imho you'll be better off making an assumption that your NAT64 will work on rather R80.xx than R77.30 with Add-on. Be careful anyway as R77.30 has some hickups with IPv6 in a past unless SME's here prove me wrong. If I were you I'd definitely go for upgrade first then consider the infra ready-to-go with IPv6. VPN IPSec though is another bit you may need to review on your side. All depends how your Communities and its design is actually facilitated and where about you're trying to ike id to ipv6 and where to ipv4.

Re: IPsec VPN between IPv4 and IPv6

Chinmaya_Naik — Wed, 09 Jan 2019 09:54:12 GMT

Thanks Jerry

Re: IPsec VPN between IPv4 and IPv6

PhoneBoy — Thu, 10 Jan 2019 06:33:48 GMT

So you’re trying to establish a VPN where one endpoint is IPv4 and the other is IPv6?

Pretty sure that’s not possible even with NAT.

Re: IPsec VPN between IPv4 and IPv6

Hugo_vd_Kooij — Fri, 11 Jan 2019 15:03:50 GMT

That is not possible.

These are 2 IP protocols and it makes as much sense as using SMB traffic to use a NFS share.

Re: IPsec VPN between IPv4 and IPv6

Chinmaya_Naik — Fri, 11 Jan 2019 18:01:10 GMT

Thanks Dameon Welch-Abernathy‌ and Hugo van der kooij.

#Chinmaya