Windows 11 IPv6 CLAT on Wi-Fi and Ethernet: what KB5127936 adds
KB5127936’s gradual-rollout notes document IPv6 CLAT on Wi-Fi and Ethernet for Windows 11 25H2/26H2 (builds 26200.9818 / 26300.9818): client-side 464XLAT so IPv4-only apps can reach IPv4 services from IPv6-only networks, PREF64 via RA with DNS ipv4only.arpa fallback, SLAAC required, and netsh/GPO enablement. Tech Community separately marked CLAT generally available on 25H2 from build 26200.9550.
Microsoft’s October 28, 2026 non-security preview KB5127936 lists IPv6 CLAT for Wi-Fi and Ethernet under gradual rollout as [Windows IPv6 networking support]. For organizations moving toward IPv6-only networks, that client-side 464XLAT path is meant to keep IPv4-only applications able to reach IPv4 services without inventing a second network stack for every legacy app.
This News article explains what the KB documents for builds 26200.9818 (25H2) and 26300.9818 (26H2), how that wording relates to the Tech Community generally available note for Windows 11 Client 25H2 from build 26200.9550, and which requirements and limits Microsoft states (SLAAC; no DHCPv6 Prefix Delegation; no WSL). It does not rehash other TricknFix pieces from the same preview package (USB Audio Class 1.0 Code 10, BitLocker PIN retry handling, Edge Accelerated App Launch, Always On VPN, Smart App Control grayed out, File Explorer customizable context menu) or treat Modernized AutoPlay as the main angle.
No hands-on CLAT lab test is claimed here. Facts follow KB5127936 and the Tech Community networking post consulted on 6 November 2026 (Europe/Paris). On a managed PC, ask your IT team before enabling CLAT, changing Group Policy, or installing an optional preview.
What CLAT is (briefly)
CLAT means Customer-side Translator. In the 464XLAT architecture, the client translates IPv4 traffic into IPv6 toward a provider-side translator (PLAT / NAT64). The Tech Community post describes that translation as stateless on the client side: IPv4-only apps can keep talking to IPv4 destinations while the wire path is IPv6-only.
That matters for IT because many line-of-business tools still assume IPv4 sockets even when the campus or branch has already dropped dual-stack. CLAT is a compatibility bridge, not a claim that every IPv4 app becomes “native IPv6.”
What KB5127936 documents
KB5127936 is dated 28 October 2026 and applies to Windows 11 version 26H2 and Windows 11 version 25H2 (builds 26300.9818 and 26200.9818).
Under gradual rollout, the item [Windows IPv6 networking support] states:
- New! Windows now supports IPv6 CLAT for Wi-Fi and Ethernet network interfaces
- Client-side 464XLAT translation so IPv4-only applications can continue reaching IPv4 services from IPv6-only networks
- Helps organizations advance IPv6-only deployments while preserving compatibility for legacy IPv4 apps
- Prefix discovery: PREF64 via Router Advertisements (RA) by default; DNS ipv4only.arpa as fallback
- Requirements: CLAT requires SLAAC-based IPv6 addressing; DHCPv6 Prefix Delegation and WSL are not currently supported
- Configuration: netsh interface clat set global permit=enabled pref64fromdns=enabled pref64fromra=enabled or Group Policy under Network > TCPIP Settings > IPv6 Transition Technologies
- Optional preview path: Settings > Windows Update > Advanced options > Optional updates
The same KB notes that Windows 11 version 24H2 no longer receives non-security preview updates starting with the October 2026 release — so this preview track is about 25H2 / 26H2, not a 24H2 optional package.
Gradual rollout means the documented feature does not arrive on every device at once even after the package is installed.
How this relates to the Tech Community GA note
On 27 October 2026, Jim Alumbaugh published Windows CLAT is Now Generally Available on the Microsoft Tech Community networking blog. That post states CLAT is generally available on Windows 11 Client 25H2 starting with build 26200.9550.
The post’s feature summary includes:
- IPv4 application access on IPv6 networks
- Local IPv4 compatibility
- Interfaces covering Wi-Fi / Ethernet / cellular (as listed in that post’s features table)
- Automatic recognition when IPv4 is unavailable or via DHCP Option 108 (RFC 8925)
- PREF64 from RA (RFC 8781)
- DNS ipv4only.arpa (RFC 7050 / 8880)
In a 2 November 2026 comment reply on the same thread, JimAlumbaugh stated that with build 26200.9550 or later, no additional patches are required beyond what is documented — without claiming “zero configuration” beyond the documented enablement path.
Read both sources together without inventing a false gap: Tech Community marks GA from 26200.9550 on 25H2; KB5127936’s preview notes (builds 26200.9818 / 26300.9818) are the first KB page that documents Wi-Fi/Ethernet CLAT for 25H2/26H2 with the netsh / GPO wording under gradual rollout. This article does not claim CLAT was absent before build 9818. Cellular details beyond what each source states are not invented here; the KB bullet quoted above focuses on Wi-Fi and Ethernet.
Requirements and limits IT should not skip
Microsoft’s KB wording is explicit:
- SLAAC-based IPv6 addressing is required for CLAT
- DHCPv6 Prefix Delegation is not currently supported
- WSL is not currently supported
- Prefix discovery prefers PREF64 from RA, with DNS ipv4only.arpa as fallback
- Enablement is documented via netsh global CLAT settings and/or Group Policy under IPv6 Transition Technologies
If your design still depends on DHCPv6 PD for client addressing, or you expected WSL guests to inherit CLAT automatically, the documented limits say otherwise as of these sources.
Practical reading for admins
- Treat KB5127936 as the preview notes page that spells out Wi-Fi/Ethernet CLAT, PREF64/DNS discovery, SLAAC, and netsh/GPO for 25H2/26H2 builds 9818
- Treat the Tech Community post as the GA announcement for 25H2 from 26200.9550, with a broader feature table (including cellular in that post)
- Validate RA PREF64 and/or DNS discovery on the segments where you plan IPv6-only + CLAT
- Confirm clients are on a build line Microsoft documents for this capability before changing production policy
- On managed devices, route enablement through your change process — optional preview installs and GPO/netsh changes are IT decisions
This article does not invent a recommended production GPO baseline, a performance benchmark, or a claim that every IPv4 app works through CLAT.
Other KB5127936 items already on TricknFix
Separate articles already cover other features or known issues from the same preview package; they are different intents:
- USB Audio Class 1.0 Code 10 still open after KB5127936
- BitLocker PIN retries / TPM dictionary lockout (KB5127936)
- Microsoft Edge Accelerated App Launch (KB5127936)
- Always On VPN stuck on Connecting — KB5127936 fix
- Smart App Control grayed out after KB5127648 — KB5127936 fix
- File Explorer customizable context menu (KB5127936)
Modernized AutoPlay from the same KB is covered as a community discussion in this cycle, not as this article’s main angle.
Conversation (0).
One account to join conversations across TricknFix.
Log in to participate