cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
313
Views
0
Helpful
1
Replies

nat64 config on ism

asheesh.mamgain
Level 1
Level 1

Hi all,

need to know the Nat64 config on asr9k with iosxr4.3 . will be needing DNS64 as well what config in needed in serviceapp interface towards the ipv6 side. what will be needed in dns 64.

regards

asheesh

1 Reply 1

xthuijs
Cisco Employee
Cisco Employee

Hi Asheesh, we have some good ISM/CGN support forum documents available too. Not sure if they specifically list a nat64 config, so in the potential absence of that here you go:

•Configure CGN role, INFRA SVI as below.

For CGN role, serviceInfra should have a address mask of at least /30

 

conf t

int serviceInfra1

  ipv4 add 1.1.1.1/30

  service-location 0/2/cpu0

  commit

  exit

hw-module service cgn location 0/2/cpu0

commit

exit

NAT64 Configuration – V4 ServiceApp and Static Route

conf t

int serviceApp41

    service  cgn  cgn1 service-type nat64 Stateful

    ipv4 add 41.41.41.1/30

    commit

exit

 

router static

  address-family ipv4 unicast

  52.52.52.0/24 ServiceApp41 41.1.1.2

   commit

   exit

end

NAT64 Configuration - V6 ServiceApp and Static Route

conf t

int serviceApp61

    service  cgn  cgn1 service-type  nat64 Stateful

    ipv6 address 2001:202::/32

    commit

exit

 

router static

  address-family ipv6 unicast

  3301:db8::/32 ServiceApp61 2001:202::2

  commit

  exit

end

service cgn cgn1

 service-location preferred-active 0/2/CPU0

  service-type nat64 stateful nat64_1

  ubit-reserved

  refresh-direction Outbound

  portlimit 65535

  ipv6-prefix 3301:db8::/32

  ipv4 address-pool 52.52.52.0/24

  ipv4 address-pool 53.53.53.0/24

  dynamic-port-range start 1

  tcp-policy

  filter-policy

  fragment-timeout 10

  address-family ipv4

   tos 125

   interface ServiceApp41

   tcp mss 900

  address-family ipv6

   interface ServiceApp61

   traffic-class 130

   tcp mss 750

 

service cgn cgn1

 service-location preferred-active 0/2/CPU0

  service-type nat64 stateful nat64_1

   ---------

   protocol tcp

   address 40.1.1.2

    timeout 100

    port 500 timeout 70

   !

   port 600 timeout 80

  !

  external-logging netflow version 9

   server

    address 90.1.1.1 port 99

    session-logging

   !


xander

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: