In FortiOS 5.2, NAT64 and NAT46 support hairpinning between hosts that are located in the same network behind a single external IP address. Hairpinning allows endpoints on the internal network to communicate using external IP addresses and ports.

In order to allow hairpinning, set permit-any-host must be enabled in the NAT64 or NAT46 firewall policy.