Forum Discussion

Sebastien_Paque's avatar
Sebastien_Paque
Icon for Nimbostratus rankNimbostratus
May 23, 2014

Help configuring NAT64 on a BIG-IP LTM

Hi everyone,   I have been trying to implement NAT64 in our network in order for IPv6 only clients can reach our IPv4 only servers. Being relatively new to the product, I have had a bit of difficu...
application delivery
availability
BIG-IP Access Policy Manager (APM)
design
performance
security
  • Cory_50405's avatar
    Cory_50405
    May 27, 2014

    You may need to run packet captures at this point to determine why the page isn't loading:

     

    tcpdump -nni 0.0:n -s0 host 2001:b3e:45f1:6121::7 (client side)

     

    tcpdump -nni 0.0:n -s0 host 192.168.1.7 (server side)

     

    You can have pool members or virtual servers specifying all ports, but your pool member can't be monitored on all ports. The monitor must be specific to a certain protocol/port. If this is an HTTP connection only, then it's best to have your pool member configured with port 80.

     

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
May 23, 2014

No SNATs required, automap works for us.

 

You can run a tcpdump on the back end to see if the translation was made. Based on your diagram, that would be:

 

tcpdump -nni 0.0:n -s0 host 192.168.1.7

 

This should show you in the capture what virtual server the traffic is being translated through.

 

From the IPv6 client, the destination of your request should be the IPv6 address associated with your virtual server (2001:b3e:45f1:6121::3).