F3215-HP Load Balancing Module Network Management Configuration Guide-6PW101

129
Configuring a dynamic mapping policy on the IPv6 side
A dynamic IPv4/IPv6 mapping policy on the IPv6 side is that if the source IPv6 address matches a
specific IPv6 ACL or the destination IPv6 address is the same as the specified NAT-PT prefix, the source
IPv6 address will be translated into an IPv4 address in a specified NAT-PT address pool or the IPv4
address of a specific interface. For ACL configuration, see Security Configuration Guide.
The device provides four dynamic mapping policies:
• Policy 1—Associate an IPv6 ACL with an address pool.
If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6 address will
be translated into an IPv4 address in the specified address pool.
• Policy 2—Associate an IPv6 ACL with an interface address.
If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6 address will
be translated into the IPv4 address of the specified interface.
• Policy 3—Associate a NAT-PT prefix with an address pool.
If the destination IPv6 address of a packet matches the NAT-PT prefix, the source IPv6 address will
be translated into an IPv4 address in the specified address pool.
• Policy 4—Associate a NAT-PT prefix with an interface address.
If the destination IPv6 address of a packet matches the NAT-PT prefix, the source IPv6 address will
be translated into the IPv4 address of the specified interface.
To use policy 1 or 3, configure a NAT-PT address pool first.
A NAT-PT address pool is a group of contiguous IPv4 addresses and is used to translate an IPv6 address
into an IPv4 address dynamically. When an IPv6 packet is sent from an IPv6 network to an IPv4 network,
if policy 1 or 3 is set, the NAT-PT device will select an IPv4 address from the NAT-PT address pool as the
source IPv4 address of the IPv6 packet.
To configure a dynamic IPv4/IPv6 address mapping policy on the IPv6 side:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure a NAT-PT
address pool.
natpt address-group group-number start-ipv4-address
end-ipv4-address
Skip this step if you use
policy 2 or policy 4.
3. Configure a dynamic
IPv4/IPv6 address
mapping policy on
the IPv6 side.
• Associate an IPv6 ACL with an address pool:
natpt v6bound dynamic acl6 number acl-number
address-group address-group [ no-pat ]
• Associate an IPv6 ACL with an interface address:
natpt v6bound dynamic acl6 number acl-number
interface interface-type interface-number
• Associate a NAT-PT prefix with an address pool:
natpt v6bound dynamic prefix natpt-prefix
address-group address-group [ no-pat ]
• Associate a NAT-PT prefix with an interface
address:
natpt v6bound dynamic prefix natpt-prefix
interface interface-type interface-number
Use one of the
commands.
The NAT-PT prefix referenced in a natpt v6bound dynamic command must have been configured with the
natpt prefix command.