NAT64 uses an IPv4-embedded IPv6 address as described
in RFC 6052, IPv6 Addressing of IPv4/IPv6 Translators.
An IPv4-embedded IPv6 address is an IPv6 address in which 32 bits
have an IPv4 address encoded in them. The IPv6 prefix length (PL
in the figure) determines where in the IPv6 address the IPv4 address
is encoded, as follows:
The firewall supports translation for /32, /40, /48, /56, /64,
and /96 subnets using these prefixes. A single firewall supports
multiple prefixes; each NAT64 rule uses one prefix. The prefix can
be the Well-Known Prefix (64:FF9B::/96) or a Network-Specific Prefix
(NSP) that is unique to the organization that controls the address translator
(the DNS64 device). An NSP is usually a network within the organization’s
IPv6 prefix. The DNS64 device typically sets the u field and suffix
to zeros; the firewall ignores those fields.