From owner-freebsd-net@FreeBSD.ORG Tue Feb 15 05:01:11 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2AD30106566C for ; Tue, 15 Feb 2011 05:01:11 +0000 (UTC) (envelope-from lars.eggert@nokia.com) Received: from mgw-da02.nokia.com (smtp.nokia.com [147.243.128.26]) by mx1.freebsd.org (Postfix) with ESMTP id 02D918FC18 for ; Tue, 15 Feb 2011 05:01:10 +0000 (UTC) Received: from mail.fit.nokia.com (esdhcp030222.research.nokia.com [172.21.30.222]) by mgw-da02.nokia.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id p1F4DqmF006885 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 15 Feb 2011 06:13:53 +0200 X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.96.5 at fit.nokia.com Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: multipart/signed; boundary=Apple-Mail-5--539034263; protocol="application/pkcs7-signature"; micalg=sha1 From: Lars Eggert In-Reply-To: Date: Tue, 15 Feb 2011 06:13:49 +0200 Message-Id: References: To: Darek M X-Mailer: Apple Mail (2.1082) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.6 (mail.fit.nokia.com); Tue, 15 Feb 2011 06:13:49 +0200 (EET) X-Spam-Status: No, score=-101.1 required=5.0 tests=ALL_TRUSTED,BAYES_00, MISSING_SUBJECT,USER_IN_WHITELIST autolearn=no version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on fit.nokia.com X-Nokia-AV: Clean X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-net@freebsd.org Subject: Re: IPv4 and IPv6 NAT X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Feb 2011 05:01:11 -0000 --Apple-Mail-5--539034263 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, On 2011-2-14, at 19:59, Darek M wrote: > Currently using 7.2-RELEASE, with ipnat/ipfilter. >=20 > Will I be setting up the NAT box in dual stack? yes. > Will that allow me then to provide each private host with a v6 IP? Yes. > Will that then make the private hosts run in dual stack? If the OS on the private hosts implements dual-stack, yes. > In turn > allowing them to access v4 networks via NAT, and v6 networks using > packet forwarding on the NAT box, but not actually using NAT? Yes. > Or would IPv4 DHCP assignments erase the v6 IPs? No. > Or would I have to do translation on the NAT box? You don't need NAT for IPv6. You do probably want to set up a firewall = though. > I have the option > of adding the v6 IPs on a separate network interface, if that would > ease the configuration. Same interface is fine. Lars= --Apple-Mail-5--539034263--