16.5 IPv6 support for NAT

16.5.1 Overview

The FortiBalancer appliance not only supports NAT64 and NAT46, but also supports “IPv6 to IPv6” NAT, which is able to translate the IPv6 addresses on the internal network to the IPv6 addresses on the Internet. In addition, NAT pool configurations also support IPv6.

Note:

• “IPv6 to IPv6” NAT supports TCP and UDP packets, but does not support ICMP and FTP packets.
• When configuring the “IPv6 to IPv6” NAT, the parameter “gateway” cannot be configured in the “nat port {pool_name|vip} <source_ip> {netmask|prefix} [timeout] [gateway] [description]” command.

16.5.2 Configuration Example

• web UI:

Select System Configuration > NAT. Click the Add NAT Port action link, specify parameters in the Add NAT Port area and click the Save action link.

• CLI:

Execute the following command to configure the IPv6 NAT:

nat port {pool_name|vip} <source_ip> {netmask|prefix} [timeout] [gateway] [description]

For example:

FortiBalancer(config)#nat port ipv6_pool 3fff::12 64