HP VPN Firewall Appliances VPN Command Reference

168
prefix-dns64 dns64-prefix prefix-length: Specifies the DNS64 prefix for matching destination IPv6
addresses. If the destination address of a packet from an IPv6 network to an IPv4 network contains the
specified DNS64 prefix, the AFT translates the source IPv6 address into an IPv4 address. The
dns64-prefix argument represents the DNS64 prefix, and the prefix-length argument represents the prefix
length, which can be 32, 40, 48, 56, 64, or 96 bits.
address-group group-number: Specifies the IPv4 address group for address translation. The AFT
translates the source IPv6 addresses into IPv4 addresses in this pool. The address-group argument
represents the address pool number in the range of 1 to 32.
no-pat: Disables port number translation. If the no-pat keyword is not provided, port number translation
is also performed.
interface interface-type interface-number: Translates a matching source IPv6 address into the IPv4
address of the specified interface. The interface-type interface-number argument specifies the interface
type and number.
Usage guidelines
The DNS64 prefix must be configured through the aft prefix-dns64 command.
Examples
# Configure an AFT policy for IPv6 packets destined to an IPv4 network so that the source IPv6 address
of a packet that matches IPv6 ACL 2001 is translated into an IPv4 address in AFT address pool 1.
<Sysname> system-view
[Sysname] aft address-group 1 2.3.4.5 2.3.4.10
[Sysname] aft v6tov4 acl6 number 2001 address-group 1
Related commands
display aft all
reset aft statistics
Use reset aft statistics to clear all AFT statistics.
Syntax
reset aft statistics
Views
User view
Default command level
1: Monitor level
Examples
# Clear all AFT statistics.
<Sysname> reset aft statistics
Related commands
display aft statistics