NPTv6 does prefix translation between one IPv6 address to another.

Is there a way to prevent outside initiated traffic to inside (preferably in A10 AX devices)?

  • 2
    NAT and firewalling are unrelated features. Any firewall will do what you want. – Sander Steffann Jul 31 '17 at 9:18
  • 1
    It is not even necessary to use NPTv6 at all, in order to firewall. – Michael Hampton Mar 10 '18 at 22:37

In order to implement an "outgoing connections only" policy the firewall needs to keep track of the connections initiated internally so it can allow responses back in without opening up the floodgates. There is no fundamental differance here between IPv4 and IPv6.

Whether your particular hardware supports that for IPv6 I cannot answer.

  • It is AX2500, probably need higher level device. – YOU Jul 31 '17 at 16:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.