HP VPN Firewall Appliances Network Management Configuration Guide

921
Figure 412 Network diagram
Table 84 Interface and IP address assignment
Device Interface IPv6 address
Device Interface IPv6 address
Source 1 — 1001::1/64 Source 3 — 3001::1/64
Source 2 — 2001::1/64 Receiver — 4001::1/64
Router A Eth1/1 1001::2/64 Router C Eth1/1 3001::2/64
Router A Eth1/2 1002::1/64 Router C Eth1/2 3002::1/64
Router A Eth1/3 1003::1/64 Router C Eth1/3 2002::2/64
Router B Eth1/1 2001::2/64 Firewall GE0/1 4001::2/64
Router B Eth1/2 1002::2/64 Firewall GE0/2 3002::2/64
Router B Eth1/3 2002::1/64 Firewall GE0/3 1003::2/64
Configuration procedure
1. Enable IPv6 forwarding, and assign IPv6 addresses, and configure IPv6 unicast routing:
a. Enable IPv6 forwarding on each router and assign an IPv6 address and prefix length to each
interface according to Figure 412. (Details not shown.)
b. Configure OSPFv3 on the routers to make sure they are interoperable at the network layer and
they can dynamically upda
te their routing information. (Details not shown.)
2. Enable IPv6 multicast routing, enable IPv6 PIM-SM on each interface and enable MLD and MLD
SSM mapping on the host-side interface:
# On the firewall, enable IPv6 multicast routing, enable MLD (version 2) and MLD SSM mapping
on GigabitEthernet 0/1, and enable IPv6 PIM-SM on each interface.
<Firewall> system-view
[Firewall] multicast ipv6 routing-enable
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] mld enable
[Firewall-GigabitEthernet0/1] mld version 2
[Firewall-GigabitEthernet0/1] mld ssm-mapping enable
[Firewall-GigabitEthernet0/1] pim ipv6 sm
[Firewall-GigabitEthernet0/1] quit
[Firewall] interface gigabitethernet 0/2