Help Center/ Cloud Firewall/ FAQs/ Troubleshooting/ Why Is the IP Address Translated Using NAT64 Blocked?

Updated on 2024-07-05 GMT+08:00

View PDF

Why Is the IP Address Translated Using NAT64 Blocked?

A firewall instance cannot protect the real source IP address before NAT64 translation. If you enable IPv6 translation for EIPs, NAT64 will translate a source IP address into a CIDR block of 198.19.0.0/16 for ACL access control.

For IPv6 access, you are advised to allow traffic from the predefined address group NAT64 Address Set. Access from all the IP addresses in the 198.19.0.0/16 CIDR block will be allowed. You can configure the blacklist or a blocking policy to block specific IP addresses.

For details about the IPv6 EIP function, see Assigning or Releasing an IPv6 EIP.
For details about NAT64 Address Set, see NAT64 Address Set.
For details about how to configure the blacklist, see Adding an Item to the Blacklist or Whitelist.
For details about how to configure a blocking policy, see Adding a Protection Rule.

Parent topic: Troubleshooting

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot