Why u are using mapped{} options in dns64 conf ???
What we are doing is: dns64 2001:db8:5200::/96 { Clients { 2001:db8:1000:10::/64; 2001:db8:20:10::/64; ... }; }; From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org [mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of Rock July Sent: Monday, May 28, 2012 8:05 AM To: Phil Mayers; bind-users@lists.isc.org Subject: Re: DNS64 - multiple mapping Hi Phil, Thanks. We have multiple IPv4 networks and we want to have different IPv6 address network mapping for each IPv4 manily for security reasons. Based from your reply, I can add multiple dns64 in options. Should I configure it like this? options { directory "/var/cache/bind"; auth-nxdomain no; listen-on-v6 { any; }; allow-query { any; }; dns64 2001:db8:1:ffff::/96 { clients { any; }; mapped { 10.10.10.0/24; }; }; dns64 2001:db9:1:ffff::/96 { clients { any; }; mapped { 10.10.20.0/24; }; }; }; Thanks From: Phil Mayers <p.may...@imperial.ac.uk> To: bind-users@lists.isc.org Sent: Thursday, May 24, 2012 4:15 PM Subject: Re: DNS64 - multiple mapping On 05/24/2012 07:36 AM, Rock July wrote: > Hi All, > Is it possible for me to add multiple dns64 in options? I want to have Yes. > different IPv6 prefix for each IPv4 network address. I don't know what the means, but the dns64 option takes a quite comprehensive set of ACLs to match client and original packet A address(es) as well as other options. Perhaps you should read the ARM? _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users