Two NAT64 rules

[Farkhad_Mameto1]

Hi Team! Could you kindly help me? 🙂

fwm ver
This is Check Point Security Management Server R77.30 - Build 035
Installed Plug-ins: R77.20 Add-on, R77.30 Add-on

I have faced with problem when trying to install 2 rules.

First rule - embedded NAT64 translation for users who has only IPv6 addresses to reach IPv4 networks

Second rule - Static NAT64 for external IPv6 users who have to reach IPv4 site on the local network which has no IPv6 address

Rules:

Errors appear when I am trying to install policy:

When I disable one of the rules - policy installing normally

[PhoneBoy]

I believe your second rule is incorrectly defined.

However, I discussed the correct way to create that rule here: https://community.checkpoint.com/message/9501-re-ipv6-with-checkpoint-r7730 

[Farkhad_Mameto1]

Thank you for answer!

But each rule works fine if disable one of these. For example, when i disabling rule 1, policy would install normally and second rule works fine and vice versa

[Farkhad_Mameto1]

And I've created rule 2 as your described in IPv6 with Checkpoint R77.30 

Only one thing, when I replace translated destination address to IPv4_Site it change from "64" to "s". But this rule works fine (if disabling rule one)

[PhoneBoy]

Have you opened a ticket with TAC on this?

It could very well be some sort of policy validation bug that we need to investigate further.

Contact Support | Check Point Software