# Cisco NAT64 Static Configuration **URL:** \ **Category:** Lessons Discussion\ **Created:** [December 29, 2016, 8:13pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292 "2016-12-29T20:13:48Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [December 29, 2016, 8:13pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/1 "2016-12-29T20:13:48Z")
This topic is to discuss the following lesson: > **[Cisco NAT64 Static Configuration](https://networklessons.com/ipv6/cisco-nat64-static-configuration)** > > This lesson explains how to configure NAT64 to translate between IPv4 and IPv6 addresses on Cisco IOS XE routers. ---
**Author:** ![jolramospr](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/j/dec6dc/32.png) [@jolramospr](https://forum.networklessons.com/u/jolramospr)\ **Post date:** [September 9, 2015, 10:27pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/2 "2015-09-09T22:27:01Z")
5 stars!!! ---
**Author:** ![johnfrades](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/j/e0b2c6/32.png) [@johnfrades](https://forum.networklessons.com/u/johnfrades)\ **Post date:** [September 25, 2015, 2:06pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/3 "2015-09-25T14:06:26Z")
awesome lesson!!! ---
**Author:** ![dimitriou.ch](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/d/e495f1/32.png) [@dimitriou.ch](https://forum.networklessons.com/u/dimitriou.ch)\ **Post date:** [February 8, 2016, 3:00pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/4 "2016-02-08T15:00:29Z")
Hi Rene, I’m trying to configure nat64 but apparently the ios I’m using does not recognize these commands. just to confirm it is it because of the IOS version or do i need to enable anything? the ios i’m using is : BOOTLDR: 7200 Software (C7200-ADVIPSERVICESK9-M), Version 15.1(4)M5, ---
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [February 9, 2016, 3:07pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/5 "2016-02-09T15:07:31Z")
It’s probably the IOS version and/or platform. ---
**Author:** ![aujla3](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/3be4f8/32.png) [@aujla3](https://forum.networklessons.com/u/aujla3)\ **Post date:** [April 11, 2016, 12:52am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/6 "2016-04-11T00:52:37Z")
Hi Rene, correction: `R2(config)#interface GigabitEthernet 2` your diagram shows FastEhternet interfaces but in the configuration you are saying GigabitEthernet. ---
**Author:** ![stuart.w.gall](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/dbc845/32.png) [@stuart.w.gall](https://forum.networklessons.com/u/stuart.w.gall)\ **Post date:** [July 28, 2016, 11:14pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/7 "2016-07-28T23:14:37Z")
There is very limited support for NAT64 on cisco devices. As far as I can tell it is limited to Cisco IOS XE Release 3.5S or better. So you certainly can’t run this on GNS3. I think that NAT64 is not actually very useful outside of a LAB. In practice you need DNS entries for both the real and mapped addresses which is more of a pain than running dual stack. Stuart. ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [January 2, 2017, 7:18am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/8 "2017-01-02T07:18:16Z")
Hello Aujla3 You are correct! I will let Rene know. Thanks! Laz ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [January 2, 2017, 7:31am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/9 "2017-01-02T07:31:48Z")
Hello Stuart For the most part you are correct that NAT64 has a limited usage in real world applications. However, there are cases where it is necessary. Also, it is supported by Cisco IOS-XE 15.1(3)S4 as well as Cisco ASA 9.1 and later. Running two protocols in parallel always requires more management overhead, and if it can be avoided at all, it is good to do so. Unfortunately, it’s not always possible. I hope this has been helpful! Laz ---
**Author:** ![mrdecisive](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/m/7993a0/32.png) [@mrdecisive](https://forum.networklessons.com/u/mrdecisive)\ **Post date:** [August 11, 2017, 6:02pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/10 "2017-08-11T18:02:26Z")
“Now we can configure the actual translation rules. We will use a fake IPv4 address that R1 can use as its destination and a fake IPv6 address that R3 can use as its destination.” Does this fake ipv4 address have to be pingable or on the same subnet ? Also I’ve configured the nat64 prefix to a custom prefix; however the translator is only activating if I use 64:ff9b::8.8.8.8. I’m using a CSR1000v as my NAT64 translator and I’m getting translations; however I’m not getting any return traffic. I’m using a http proxy to access the Internet. All in a vcenter environment ---
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [August 18, 2017, 9:59am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/11 "2017-08-18T09:59:37Z")
Hi @mrdecisive, It shouldn’t be pingable, it’s an address that is not in use and probably be on the same subnet. You also have to use the 64:ff9b::/96 prefix. Rene ---
**Author:** ![deepakeapen123](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/d/bbce88/32.png) [@deepakeapen123](https://forum.networklessons.com/u/deepakeapen123)\ **Post date:** [March 28, 2018, 1:17am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/12 "2018-03-28T01:17:47Z")
Hi Rene, Will i be able to ping from R1 to 2001:DB8:2323:2323::3 and from R3 to 192.168.12.1. We have a scenario wherein when the client is in IPv4 it needs to talk to IPv6 server, the original IP address and not the fake IPv4 address and vice versa ---
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [April 4, 2018, 10:47am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/13 "2018-04-04T10:47:49Z")
Hi Deepak, You can make it work by only by using “fake” addresses like I did here. IPv4 and IPv6 are not compatible so an IPv4 host has no idea what an IPv6 address is and an IPv6 host doesn’t know what an IPv4 address is. It’s like talking Chinese to an English speaker or vice versa 😄 Rene ---
**Author:** ![chrisnewnham17](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/c/f9ae1b/32.png) [@chrisnewnham17](https://forum.networklessons.com/u/chrisnewnham17)\ **Post date:** [October 15, 2018, 8:29am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/14 "2018-10-15T08:29:21Z")
Could you also configure this the other way around? > nat64 v6v4 static 2001:DB8:2323:2323::3 192.168.12.3 Change to: > nat64 v4v6 static 192.168.12.3 2001:DB8:2323:2323::3 ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [October 22, 2018, 9:15pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/15 "2018-10-22T21:15:00Z")
Hello Chris Yes, such a configuration would work, assuming you want to translate the other way around. I hope this has been helpful Laz ---
**Author:** ![sales2161](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/sales2161/32/1432_2.png) [@sales2161](https://forum.networklessons.com/u/sales2161)\ **Post date:** [March 2, 2019, 3:54pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/16 "2019-03-02T15:54:32Z")
> [@lagapidis](#): > > Yes, such a configuration would work Hello Laz, but in that case, the IPv6 address will be the fake one and IPv4 be the real one. correct? ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [March 4, 2019, 9:09am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/17 "2019-03-04T09:09:51Z")
Hello sales2161 Well, it all depends on your point of view. 😛 When we talk about NAT in IPv4, we traditionally talk about “real” and “fake”, public and private, routeable and non-routable addresses because we are translating for the purpose of conserving addresses. So there is a meaning to these terms. However, NAT in a more general sense is a translation from one IP address range to another, regardless of whether the addresses are private, public, routable or not. You could translate from 10.10.10.0/24 to 172.16.0.0/24 for example. In such a case, which is fake and which is real? It depends on your point of view. When we apply this to NAT64, what we are doing is translating between address spaces of two different protocols. Which is real or which is fake depends on the application, on which side of the NAT64 router is facing the Internet and which is not (maybe neither is facing the Internet). So if we use the conventions of the terminology, then yes, you are correct, the IPv6 address will be fake and the IPv4 will be real. But looking at it in a broader sense, it just becomes a translation in the opposite direction. I hope this has been helpful! Laz ---
**Author:** ![RegisTB](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/registb/32/1430_2.png) [@RegisTB](https://forum.networklessons.com/u/RegisTB)\ **Post date:** [March 18, 2019, 3:04pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/18 "2019-03-18T15:04:06Z")
which router model are you using to configure the nat64 on the ipv6 interface. I used a 7200 and a 2691 in gns 3 and I am not able to get this done ``` R2(config-if)#int f1/0 R2(config-if)#nat64 enable ^ % Invalid input detected at '^' marker. R2(config-if)# ``` ---
**Author:** ![doogle1b1](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/d/e19b73/32.png) [@doogle1b1](https://forum.networklessons.com/u/doogle1b1)\ **Post date:** [March 20, 2019, 4:48pm UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/19 "2019-03-20T16:48:45Z")
Hello Laz, I was able to lab everything up and get this working. I tried a different fake ip address and i see the transalation taking place. ``` Router#show nat64 translations Proto Original IPv4 Translated IPv4 Translated IPv6 Original IPv6 -------------------------------------------------------- --- --- --- 192.168.12.35 2001:DB8:2323:2323::3 Total number of translations: 1 ``` But i am still not clear on what is allowing me to ping a fake ip address that is defined in the statement. `#nat64 v6v4 static 2001:DB8:2323:2323::3 192.168.12.35` Can you clear this up. Thanks. ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [March 21, 2019, 6:40am UTC](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292/20 "2019-03-21T06:40:55Z")
Hello Cecil If you’re pinging 192.168.12.35 from R1, then you will get a response due to the NAT64 translation taking place, as described in the lesson itself. If you’re pinging 2001:DB8:2323:2323::3 from R1, you shouldn’t get a response since R1 has no IPv6 routing enabled. Even if it did, it wouldn’t know what to do with such a destination address since no such destination is found within its IPv6 routing table. I hope this has been helpful! Laz [Next page](https://forum.networklessons.com/t/cisco-nat64-static-configuration/1292.md?page=2)