HP VPN Firewall Appliances Network Management Configuration Guide

886
Device Interface IPv6 address Device Interface IPv6 address
Router C POS5/0 3001::1/64 Router D Eth1/1 4002::2/64
Configuration procedure
1. Enable IPv6 forwarding and configure IPv6 addresses and IPv6 unicast routing:
a. Enable IPv6 forwarding on each router and configure the IPv6 address and prefix length for
each interface according to Figure 408. (Details not shown.)
b. Configure OSPFv3 on the routers in the IPv6 PIM-D
M domain to make sure they are
interoperable at the network layer. (Details not shown.)
2. Enable IPv6 multicast routing, MLD and IPv6 PIM-SM:
# On Router A, enable IPv6 multicast routing globally, enable MLD on Ethernet 1/1, and enable
IPv6 PIM-SM on each interface.
<RouterA> system-view
[RouterA] multicast ipv6 routing-enable
[RouterA] interface ethernet 1/1
[RouterA-Ethernet1/1] mld enable
[RouterA-Ethernet1/1] pim ipv6 sm
[RouterA-Ethernet1/1] quit
[RouterA] interface ethernet 1/2
[RouterA-Ethernet1/2] pim ipv6 sm
[RouterA-Ethernet1/2] quit
[RouterA] interface pos 5/0
[RouterA-Pos5/0] pim ipv6 sm
[RouterA-Pos5/0] quit
# Enable IPv6 multicast routing, MLD and IPv6 PIM-SM on Router B and Router C in the same way.
(Details not shown.)
# Enable IPv6 multicast routing and IPv6 PIM-SM on Router D and the firewall in the same way.
(Details not shown.)
3. Configure C-BSRs and C-RPs:
# On the firewall, configure the service scope of RP advertisements, specify a C-BSR and a C-RP,
and set the hash mask length to 128 and the priority of the C-BSR to 10.
<Firewall> system-view
[Firewall] acl ipv6 number 2005
[Firewall-acl6-basic-2005] rule permit source ff0e::101 64
[Firewall-acl6-basic-2005] quit
[Firewall] pim ipv6
[Firewall-pim6] c-bsr 4002::1 128 10
[Firewall-pim6] c-rp 4002::1 group-policy 2005
[Firewall-pim6] quit
# On Router D, configure the service scope of RP advertisements, specify a C-BSR and a C-RP, and
set the hash mask length to 128 and the priority of the C-BSR to 20.
<RouterD> system-view
[RouterD] acl ipv6 number 2005
[RouterD-acl6-basic-2005] rule permit source ff0e::101 64
[RouterD-acl6-basic-2005] quit
[RouterD] pim ipv6