Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Farkhad_Mameto1
Explorer

Two NAT64 rules

Hi Team! Could you kindly help me? 🙂

fwm ver
This is Check Point Security Management Server R77.30 - Build 035
Installed Plug-ins: R77.20 Add-on, R77.30 Add-on

I have faced with problem when trying to install 2 rules.

First rule - embedded NAT64 translation for users who has only IPv6 addresses to reach IPv4 networks

Second rule - Static NAT64 for external IPv6 users who have to reach IPv4 site on the local network which has no IPv6 address

Rules:

Errors appear when I am trying to install policy:

When I disable one of the rules - policy installing normally

Labels (1)
0 Kudos
Reply
4 Replies
PhoneBoy
Admin
Admin

I believe your second rule is incorrectly defined.

However, I discussed the correct way to create that rule here: https://community.checkpoint.com/message/9501-re-ipv6-with-checkpoint-r7730 

Farkhad_Mameto1
Explorer

Thank you for answer!

But each rule works fine if disable one of these. For example, when i disabling rule 1, policy would install normally and second rule works fine and vice versa

0 Kudos
Reply
Farkhad_Mameto1
Explorer

And I've created rule 2 as your described in IPv6 with Checkpoint R77.30 

Only one thing, when I replace translated destination address to IPv4_Site it change from "64" to "s". But this rule works fine (if disabling rule one)

0 Kudos
Reply
PhoneBoy
Admin
Admin

Have you opened a ticket with TAC on this?

It could very well be some sort of policy validation bug that we need to investigate further.

Contact Support | Check Point Software 

0 Kudos
Reply