NAT66 destination address translation
NAT66 can also be used to translate destination addresses. This is done in an IPv6 policy by using IPv6 virtual IPs. For example, enter the following command to add an IPv6 virtual IP that maps the destination address 2001:db8::dd to 2001:db8::ee
configure firewall vip6
edit example-vip6
set extip 2001:db8::dd
set mappedip 2001:db8::ee
end
Enter the following command to add an IPv6 security policy that accepts packets with a destination address 2001:db8::dd and translates that destination address to 2001:db8::ee
config firewall policy6
edit 0
set srcintf internal
set dstintf wan1
set srcaddr all
set dstaddr example-vip6
set action accept
set schedule always
set service ANY
end