DNS64 - multiple mapping

[Gaurav Kansal]

Hi Rock,

 

So have u got success in mapping specific v6 network to defined v4 network?

 

From: Rock July [mailto:headgear17 at yahoo.com] 
Sent: Monday, June 04, 2012 10:55 AM
To: Gaurav Kansal; 'Phil Mayers'; bind-users at lists.isc.org
Subject: Re: DNS64 - multiple mapping

 

Hi Gaurav,

 

My goal is to mapped IPv6 to a specific IPv4 network that is why I use a mapped { } in options.

 

Regards,

Rock

 

From: Gaurav Kansal <gaurav.kansal at nic.in>
To: 'Rock July' <headgear17 at yahoo.com>; 'Phil Mayers' <p.mayers at imperial.ac.uk>; bind-users at lists.isc.org 
Sent: Wednesday, May 30, 2012 6:34 PM
Subject: RE: DNS64 - multiple mapping





Why u are using mapped{} options in dns64 conf ???

 

What we are doing is:

 

dns64 2001:db8:5200::/96 {

Clients {

   2001:db8:1000:10::/64;

   2001:db8:20:10::/64;

    …….

   };

};

 

 

 

From: bind-users-bounces+gaurav.kansal=nic.in at lists.isc.org [mailto:bind-users-bounces+gaurav.kansal=nic.in at lists.isc.org] On Behalf Of Rock July
Sent: Monday, May 28, 2012 8:05 AM
To: Phil Mayers; bind-users at lists.isc.org
Subject: Re: DNS64 - multiple mapping

 

Hi Phil,

 

Thanks. We have multiple IPv4 networks and we want to have different IPv6 address network mapping for each IPv4 manily for security reasons.

 

Based from your reply, I can add multiple dns64 in options. Should I configure it like this?

 

options {

   directory "/var/cache/bind";
   auth-nxdomain no;
   listen-on-v6 { any; };
   allow-query { any; };
   

dns64 2001:db8:1:ffff::/96 {
    clients { any; }; 
    mapped { 10.10.10.0/24; };

    };

    dns64 2001:db9:1:ffff::/96 {
    clients { any; };
    mapped { 10.10.20.0/24; };

    };

  };

 

Thanks

 

From: Phil Mayers <p.mayers at imperial.ac.uk>
To: bind-users at lists.isc.org 
Sent: Thursday, May 24, 2012 4:15 PM
Subject: Re: DNS64 - multiple mapping


On 05/24/2012 07:36 AM, Rock July wrote:
> Hi All,
> Is it possible for me to add multiple dns64 in options? I want to have

Yes.

> different IPv6 prefix for each IPv4 network address.

I don't know what the means, but the dns64 option takes a quite comprehensive set of ACLs to match client and original packet A address(es) as well as other options. Perhaps you should read the ARM?
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120604/ddd5c4f7/attachment.html>