HP VPN Firewall Appliances VPN Command Reference

165
[Sysname-GigabitEthernet0/1] aft enable
Related commands
• display aft statistics
• display aft all
aft prefix-dns64
Use aft prefix-dns64 to specify a DNS64 prefix.
Use undo aft prefix-dns64 to delete a specific DNS64 prefix.
Syntax
aft prefix-dns64 dns64-prefix prefix-length
undo aft prefix-dns64 dns64-prefix prefix-length
Default
No DNS64 prefix is specified.
Views
System view
Default command level
2: System level
Parameters
dns64-prefix: Specifies the DNS64 prefix.
prefix-length: Specifies the prefix length, which can be 32, 40, 48, 56, 64, or 96 bits.
Usage guidelines
The DNS64 prefix cannot be in the same network segment as the connected IPv6 network. Otherwise,
when an IPv6 host attempts to communicate with an IPv4 host, the IPv6 host multicasts a neighbor
solicitation (NS) packet for the link-layer address of the destination IPv6 address that contains the DNS64
prefix. AFT does not forward the packet to the IPv4 network or respond to the packet on behalf of the IPv4
host. As a result, the IPv6 host cannot communicate with the IPv4 host.
The DNS64 prefix cannot be the same as the IVI prefix. Otherwise, an IPv6 host cannot communicate
with another IPv6 host whose address has an IVI prefix because the AFT device performs address
translation for the packet and sends it to the IPv4 network.
Examples
# Specify the DNS64 prefix as 2000:db8e:: and the prefix length as 32.
<Sysname> system-view
[Sysname] aft prefix-dns64 2000:db8e:: 32
Related commands
display aft all
aft prefix-ivi
Use aft prefix-ivi to specify an IVI prefix.