Re: Use of NPTv6 in a mobile service provider network

2025-02-02 Thread Joshua Miller
Hi Amos, Assuming the network segments adjacent to these stateful devices use longest prefix match routing, NPTv6 is your best option.You'd assign a unique IPv6 prefix as the NPTv6 prefix to each firewall, ensuring the traffic returns to the correct firewall. Keep in mind each stateful firewall i

Use of NPTv6 in a mobile service provider network

2025-02-02 Thread Amos Rosenboim via NANOG
Hi, We are implementing an CGNAT + IPv6 firewall project for a mobile service provider. One of the project goals is to support scale out all active deployment of the stateful devices. One of the challenges of inserting these stateful devices into the network is the requirement that all packet