IPv6 NAT Support

[PhoneBoy]

• NAT46 (Translate IPv4 addresses to IPv6 addresses)
  • Supported in R76 as part of R76.LTE (Long Term Evolution) Hotfix (refer to sk95768)
  • Supported in R77.10 as part of R77.10.LTE Hotfix (refer to sk100446)
  • Not supported in R77.30 and above 
• NAT64 (Translate IPv6 addresses to IPv4 addresses)
  • Supported in R77.30 (requires R77.30 Add-On)
  • Not currently supported in R80.10
• NAT66 (Translate IPv6 addresses to IPv6 addresses)
  • Supported as of R76

References:

• IPv6 Support FAQ 
• R80 Pre-Upgrade Verifier notifications and their solutions 
• R80.10 Pre-Upgrade Verifier notifications and their solutions 

[Jerry]

NAT64 (Translate IPv6 addresses to IPv4 addresses)

• Not currently supported in R80.10

any ideas as of when it will be supported or when potentially NAT64 we could DO on GAIA R80.10 and/or how?

I've made HIDE NAT for IPv6 subnet which is successfully handled by "inside" interface bundle but it seem it is not getting translated forward via "Outside" link (IPv4 based).

Thanks.

Jerry

[PhoneBoy]

I assume a later release, but I don’t know the specifics.

[Sergey_Slepkov]

Hi Dameon!

Do we have any updates about current situation? Mostly interested in NAT64

As for R80.20, it is the same situation? 

[PhoneBoy]

As far as I know, NAT64 is still not supported in R80.10.

It does appear to be in R80.20 (both NAT64 and NAT46).

Here's a screenshot from the current public EA.

What I don't know is whether this requires R80.20 gateways or not. 

[Jerry]

awesome finally! cheers that’s highly anticipated feature I bet

ps. how would I get 80.20 asap though? any hints folks?

Jerry

[PhoneBoy]

Check Point R80.20 Production and Public EA‌

[Jerry]

done

[Sergey_Slepkov]

And for R77.30: do we need R77.30 Carrier Security (LTE) Jumbo Hotfix Accumulator installed on GW, or Add-on for Management server is enough?

Do we need CPSG-CARR license added to GW?

[PhoneBoy]

I don't believe the LTE fix (or the license) is strictly required for this specific feature.