You are here
SEC0102 - ASA 9.x NAT46 NAT64 DNS64 Object NAT (Part 1)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Object NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. We will also go over how DNS64 can help translating IP embedded in DNS packet as it crosses the v4-v6 network boundary. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation.
Part 1 of this video focuses on Stateless NAT64 and NAT46 configuration
Topic:
- Object NAT
- Stateless NAT46 and NAT64
- Stateful NAT64 (Static, Dynamic, PAT)
- DNS64
- Stateful NAT46
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
2 comments
Web Server
Hello, I'm a student from Vietnam, your labs is very helpful, but I want to ask you more about it
Can I have a Web Server on IPv6 site and IPv4 site. What is the configuration to make IPv6(host only) access the IPv4 Web Server and vice versa.
for example: (in your lab SEC0102)
I stimulate this lab on GNS3v2.0.1 connect to VMware 12,ASAv9.6(2),IOS router 15.3
@IPv6 site(on R3)
I have added interface f0/1 on R3 with ipv6 add 2001:db8:1:2::1/64 connect to Windows 7(Web Server, IPv6 add 2001:db8:1:2::2/64) .
@IPv4 site (on R2)
I have added int f0/0 connect to Windows 7 (Web Server) with IPv4 add 192.168.1.2/24 (default gateway 192.168.1.1/24)
How can I do to accomplish this task. Please give me a detail about configuration on (WF1 to permit both sites access web services of each other)
email: (phoneamazon2017@gmail.com) I'm looking forward for your helping...
!!!my English writing is not very well,hope you understand.
Thank you and appreciate your help..
Web Server
Assuming you want both side to be able to initiate connection, you would need two bidirectional 1-to-1 NAT, one where you translate IPv6 host to IPv4 (not need to be 192.168.1.x) and another for IPv4 host to IPv6 IP (not need to be on 2001:db8:1:2::/64. If you want to use router instead to translate, there might be more efficient method that you can do for large number of host. You can check out our other IPv6 videos.