This NAT64 example shows the BIG-IP^® system CGNAT module mapping of IPv6 subscriber private addresses to IPv4 Internet public addresses.

A NAT64 example configuration

In this example, an IPv6 client initiates a request to the IPv4 server, using a source address of 2001:db8::1,1500 and a destination address of 64:ff9b::192.0.2.1,80. The NAT64 on the BIG-IP^® system selects an available port for the IPv4 address 203.0.113.1,2000, and creates a mapping entry from 2001:db8::1,1500 to 203.0.113.1,2000. The NAT64 translates the IPv6 header into an IPv4 header, including 203.0.113.1,2000 as the source address and 192.0.2.1,80 as the destination address, and sends the translated packet to the IPv4 server.

The IPv4 server responds with a server packet, which includes a destination address of 203.0.113.1,2000 and source address of 192.0.2.1,80. Upon receipt of the IPv4 server packet, the NAT64 translates the IPv4 header into an IPv6 header, which includes 2001:db8::1,1500 as the source address, and sends the response to the client.

1. On the Main tab, click Carrier Grade NAT > LSN Pools .
   The LSN Pool List screen opens.
2. Click Create.
3. In the Name field, type a unique name.
4. Select NAPT or PBA for the pool's translation Mode.
5. For the Member List setting, in the Address/Prefix Length field, type an address and a prefix length and click Add.
   In a NAT64 implementation, an example of an IPv4 member address and prefix is 203.0.113.0/24.
6. Click Finished.

1. On the Main tab, click Carrier Grade NAT > Virtual Servers .
   The Virtual Server List screen opens.
2. Click the Create button.
   The New Virtual Server screen opens.
3. In the Name field, type a unique name for the virtual server.
4. From the Type list, select Performance (Layer 4).
5. In the Destination Address field, type the IPv6 address in CIDR format.
   The supported format is address/prefix, where the prefix length is in bits. For example, an IPv6 address/prefix is ffe1::0020/64 or 2001:ed8:77b5:2:10:10:100:42/64.
6. In the Service Port field, type * or select * All Ports from the list.
7. From the Configuration list, select Advanced.
8. From the Protocol list, select * All Protocols.
9. For the LSN Pool setting, select the pool that this server will draw on for translation addresses.
10. For the Address Translation setting, select the Enabled check box to enable address translation.
11. For the Port Translation setting, clear the Enabled check box.
12. For the NAT64 setting, select the Enabled check box.
13. In the Resources area of the screen, for the iRules setting, select the name of the iRule that you want to assign and using the Move button, move the name from the Available list to the Enabled list.
14. Click Finished.

1. On the Main tab, click Carrier Grade NAT > ALG Profiles .
2. In the ALG Profiles menu, click an ALG profile.
3. Click Create.
   The New Profile screen opens.
4. Type a name for the new profile.
5. From the Parent Profile list, ensure that the correct parent profile is selected as the new profile.
6. Select the Custom check box on the right.
7. Configure the profile settings.
8. Click Finished to save the new ALG profile.

1. On the Main tab, click Carrier Grade NAT > iRules .
   The iRule List screen opens.
2. Click Create.
3. In the Name field, type a 1 to 31 character name, such as cgn_https_redirect_iRule.
4. In the Definition field, type the syntax for the iRule using Tool Command Language (Tcl) syntax.
   For complete and detailed information about iRules syntax, see the F5 Networks DevCentral web site (http://devcentral.f5.com).
5. Click Finished.