IPv6 on WAN - IPv4 on LAN ...how?

[chemlud]

Hi

I'm looking for something like this

https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/113275-nat-ptv6.html

to connect a LAN with IPv4 to a WAN with IPv6. I found NPTv6 under Interfaces - NAT, but that seems to be IPv6 to IPv6 NAT, if I understand the docs correct

https://docs.opnsense.org/manual/nptv6.html

Any way to make that work what I'm looking for?

[SFC]

You would need NAT46, which as far as I know OPNsense does not support.  It was requested all the way back during PFsense 2.2 days and never made it anywhere:
https://redmine.pfsense.org/issues/2358


If you truly need it, OpenWRT has an option (never tried it personally):
https://openwrt.org/packages/pkgdata_lede17_1/kmod-nat46

[chemlud]

Many thanks for reply!

https://forum.openwrt.org/t/allowing-remote-ipv4-access-to-local-ipv6-server/85105

https://klub.com.pl/ip46nat/snapshots/2010-09-27-release/ip46nat-users-guide.pdf

The idea looks quite dead from the beginning. I'm looking for a way forward without loosing control over the LAN with network interfaces with various, uncontrollable ipv6 adresses. Or loosing LAN when WAN is down, or, or, or....

You name the ipv6 horrors, just scroll through the forums here and have a look for ipv6. It's a nightmare.

And will take only 10 minutes before somebody tells you, ipv6 is the future, but not providing a design for a well-controlled LAN based on IPs/firewall rules.

Not a surprise I don't know any big corp that moved to this nightmare.