DNS64 - multiple mapping

Gaurav Kansal gaurav.kansal at nic.in
Mon Jun 4 07:15:19 UTC 2012

Hi Rock,


So have u got success in mapping specific v6 network to defined v4 network?


From: Rock July [mailto:headgear17 at yahoo.com] 
Sent: Monday, June 04, 2012 10:55 AM
To: Gaurav Kansal; 'Phil Mayers'; bind-users at lists.isc.org
Subject: Re: DNS64 - multiple mapping


Hi Gaurav,


My goal is to mapped IPv6 to a specific IPv4 network that is why I use a mapped { } in options.





From: Gaurav Kansal <gaurav.kansal at nic.in>
To: 'Rock July' <headgear17 at yahoo.com>; 'Phil Mayers' <p.mayers at imperial.ac.uk>; bind-users at lists.isc.org 
Sent: Wednesday, May 30, 2012 6:34 PM
Subject: RE: DNS64 - multiple mapping

Why u are using mapped{} options in dns64 conf ???


What we are doing is:


dns64 2001:db8:5200::/96 {

Clients {









From: bind-users-bounces+gaurav.kansal=nic.in at lists.isc.org [mailto:bind-users-bounces+gaurav.kansal=nic.in at lists.isc.org] On Behalf Of Rock July
Sent: Monday, May 28, 2012 8:05 AM
To: Phil Mayers; bind-users at lists.isc.org
Subject: Re: DNS64 - multiple mapping


Hi Phil,


Thanks. We have multiple IPv4 networks and we want to have different IPv6 address network mapping for each IPv4 manily for security reasons.


Based from your reply, I can add multiple dns64 in options. Should I configure it like this?


options {

   directory "/var/cache/bind";
   auth-nxdomain no;
   listen-on-v6 { any; };
   allow-query { any; };

dns64 2001:db8:1:ffff::/96 {
    clients { any; }; 
    mapped {; };


    dns64 2001:db9:1:ffff::/96 {
    clients { any; };
    mapped {; };






From: Phil Mayers <p.mayers at imperial.ac.uk>
To: bind-users at lists.isc.org 
Sent: Thursday, May 24, 2012 4:15 PM
Subject: Re: DNS64 - multiple mapping

On 05/24/2012 07:36 AM, Rock July wrote:
> Hi All,
> Is it possible for me to add multiple dns64 in options? I want to have


> different IPv6 prefix for each IPv4 network address.

I don't know what the means, but the dns64 option takes a quite comprehensive set of ACLs to match client and original packet A address(es) as well as other options. Perhaps you should read the ARM?
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120604/ddd5c4f7/attachment.html>

More information about the bind-users mailing list