防火墙5020 ipv6可以创建nat池吗。

不支持呢，参考配置指导

配置安全策略

# 配置名称为trust-untrust的安全策略，保证Trust安全域内的Host A和Host B可以访问Internet中的FTP Server，具体配置步骤如下。

[Device] security-policy ipv6

[Device-security-policy-ipv6] rule 1 name trust-untrust

[Device-security-policy-ipv6-1-trust-untrust] source-zone trust

[Device-security-policy-ipv6-1-trust-untrust] destination-zone untrust

[Device-security-policy-ipv6-1-trust-untrust] source-ip-host FD01:0203:0405::1

[Device-security-policy-ipv6-1-trust-untrust] source-ip-host FD01:0203:0405::2

[Device-security-policy-ipv6-1-trust-untrust] destination-ip-host 2001:0DC8:0001::100

[Device-security-policy-ipv6-1-trust-untrust] action pass

[Device-security-policy-ipv6-1-trust-untrust] quit

[Device-security-policy-ipv6] quit

(5)      配置NAT66前缀转换功能

# 配置IPv6源地址转换的前缀映射关系，将IPv6地址前缀FD01:0203:0405::/48转换为2001:0DF8:0001::/48。

[Device] interface gigabitethernet 1/0/2

[Device-GigabitEthernet1/0/2] nat66 prefix source fd01:0203:0405:: 48 2001:0df8:0001:: 48

[Device-GigabitEthernet1/0/2] quit