[c-nsp] NAT-PT

Bernhard Schmidt berni at birkenwald.de
Mon Feb 25 09:01:08 EST 2008


Hi,

I'm currently trying to configure NAT-PT to allow our IPv6-only clients
to access IPv4 hosts. We've bought an 2811 for this task (among others)
and I tried following 

http://www.cisco.com/en/US/docs/ios/12_2t/ipv6/SA_natpt_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1073195
http://www.civil-tongue.net/clusterf/wiki/Cisco IOS NAT-PT Configuration

but I'm getting the same error message the guys at NANOG got.

Feb 25 13:39:40.495: IPv6 NAT:v4tov6 entry not found

The relevant config sections should be the following

---
interface FastEthernet0/0
 ip address 129.187.18.250 255.255.255.0
 ipv6 address 2001:4CA0:0:FF00::FFFF/64
 ipv6 nd suppress-ra
 ipv6 nat

ipv6 route ::/0 FastEthernet0/0 2001:4CA0:0:FF00::1
ipv6 nat v6v4 source list LRZ interface FastEthernet0/0 overload
ipv6 nat prefix 2001:4CA0:0:FF03::/96

ipv6 access-list LRZ
 permit ipv6 2001:4ca0::/32 any
---

I tried adding

ipv6 nat v4v6 source 129.187.18.250 2001:4CA0:0:FF00::FFFF
and
ipv6 nat prefix 2001:4CA0:0:FF03::/96 v4-mapped LRZ

but this didn't change the behaviour at all.

I've tried 12.4(18) and 12.4(15)T3 (both ADVANCED IP SERVICES), no 
difference. 12.4(15)T3 spits out more debugging information though:

*Feb 25 13:58:59.527: IPv6 NAT:v4tov6 entry not found

*Feb 25 13:58:59.959: IPv6 NAT: ipv6nat_find_entry_v4tov6:
         ref_count = 1,
                                usecount = 0, flags = 2, rt_flags = 0,
                                more_flags = 4

*Feb 25 13:58:59.963: IPv6 NAT: tcp src
(2001:4CA0:0:F000:211:43FF:FE7E:3A76) -> (129.187.18.250), dst
(2001:4CA0:0:FF03::53AA:645) -> (83.170.6.69)

*Feb 25 13:59:05.959: IPv6 NAT: ipv6nat_find_entry_v4tov6:
         ref_count = 1,
                                usecount = 0, flags = 2, rt_flags = 0,
                                more_flags = 4

Anyone having an idea?

Thanks,
Bernhard



More information about the cisco-nsp mailing list