Hello all!
I'm new to ipv6, and was hoping that someone could check my
understanding of the af-to option.
My ISP has given me a /64 block - say 1234:1234:1234:5d6f:/64
I have a subnet of servers that are ipv4-only, and want to use the af-to
option to provide some of these servers with ipv6 addresses. I did not
have luck with auto-translation, but don't really need it. I just want
to map 1 ipv6 external ip to 1 ipv4 ip.
The rule I came up with is:
pass in quick on egress inet6 proto { tcp udp } from any to \
1234:1234:1234:5d6f::ffff:a65:64 port dns af-to inet \
from 10.101.0.1 to 10.101.0.100 port dns
Is there anything inherently wrong with doing it this way? I ask,
because all the examples I've seen so far are dealing with entire
subnets.
Thanks!
One more off-topic question... my ISP has given me a /64. It's my
understanding that rtadvd is unable to work with anything smaller than
that -- eg if I wanted to split out several /96's on the internal
interfaces?