HP VPN Firewall Appliances VPN Command Reference

167
prefix-dns64 dns64-prefix prefix-length: Specifies the DNS64 prefix, which is used to translate source
IPv4 addresses into IPv6 addresses for packets that match the specified ACL. The dns64-prefix argument
represents the DNS64 prefix, and the prefix-length argument represents the length of the prefix, which
can be 32, 40, 48, 56, 64, or 96 bits.
prefix-ivi ivi-prefix: Specifies the IVI prefix. If the destination IPv4 address of an IPv4-to-IPv6 packet
matches the specified ACL, the AFT translates the destination IPv4 address into an IPv6 address by using
the IVI prefix. The ivi-prefix argument represents the IVI prefix.
Usage guidelines
The DNS64 and IVI prefixes must be those configured through the aft prefix-dns64 and aft prefix-ivi
commands.
The ACL specified in the aft v4tov6 acl number prefix-ivi command must be configured to check the
destination addresses of packets.
Different AFT policies cannot reference the same ACL.
Examples
# Configure a 4to6 AFT policy so that: If a packet matches ACL 2000, translate the source IPv4 address
into an IPv6 address using the DNS64 prefix 2000::/32. If a packet matches ACL 3000, translate the
destination IPv4 address into an IPv6 address using the IVI prefix 3000::.
<Sysname> system-view
[Sysname] aft prefix-dns64 2000:: 32
[Sysname] aft prefix-ivi 3000::
[Sysname] aft v4tov6 acl number 2000 prefix-dns64 2000:: 32
[Sysname] aft v4tov6 acl number 3000 prefix-ivi 3000::
Related commands
display aft all
aft v6tov4
Use aft v6tov4 to configure an AFT policy to translate the source addresses of IPv6 packets destined to
IPv4 networks.
Use undo aft v6tov4 to delete a specific AFT policy.
Syntax
aft v6tov4 { acl6 number acl6-number | prefix-dns64 dns64-prefix prefix-length } { address-group
group-number [ no-pat ] | interface interface-type interface-number }
undo aft v6tov4 { acl6 number acl6-number | prefix-dns64 dns64-prefix prefix-length }
Views
System view
Default command level
2: System level
Parameters
acl6 number acl6-number: Specifies an IPv6 ACL for matching source IPv6 addresses, in the range of
2000 to 3999. If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6
address is translated into an IPv4 address accordingly.