首页 > 代码库 > asav931 ipv6 配置 nat-pt

asav931 ipv6 配置 nat-pt

1、环境准备:

asav 9.31

vcenter 6.0

2、拓扑

技术分享

3、配置asa

interface GigabitEthernet0/0
 nameif outside
 security-level 0
 ip address 192.168.1.100 255.255.255.0 

interface GigabitEthernet0/1
 nameif inside
 security-level 100
 no ip address
 ipv6 address fec0::/64 eui-64

route outside 0.0.0.0 0.0.0.0 192.168.1.1 1

object network ipv4_outside_network
 subnet 0.0.0.0 0.0.0.0

object network ipv6_outside_mapped
 subnet 201b::/96

object network ipv4_outside_network
 nat (outside,inside) static ipv6_outside_mapped dns

object network ipv6_inside_network
 subnet fec0::/64
 nat (inside,outside) dynamic interface

4、配置pc

技术分享

DNS: 201b::df05:505--->201b::/94 加上 223.5.5.5

任意ipv4在转换为ipv6时,是将ipv4转换成十六进制后再加上201b::/94前缀

参考链接:

http://geenetworks.tumblr.com/post/35363923666/cisco-asa-90-nat64-implemetation
https://wenku.baidu.com/view/1f1fc0f8cc7931b764ce154a.html
http://7658423.blog.51cto.com/7648423/1335926

本文出自 “武陵荒草” 博客,请务必保留此出处http://penguintux.blog.51cto.com/3021117/1911055

asav931 ipv6 配置 nat-pt