F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

921
Figure 411 Network diagram
Device Interface IPv6 address Device Interface IPv6 address
Source 1 — 1001::1/64 Source 3 — 3001::1/64
Source 2 — 2001::1/64 Receiver — 4001::1/64
Router A Eth1/1 1001::2
/
64 Router C Eth1/1 3001::2
/
64
Eth1/2 1002::1/64 Eth1/2 3002::1
/
64
Eth1/3 1003::1/64 Eth1/3 2002::2/64
Router B Eth1/1 2001::2
/
64 Firewall GE0/1 4001::2
/
64
Eth1/2 1002::2/64 GE0/2 3002::2
/
64
Eth1/3 2002::1/64 GE0/3 1003::2/64
1847BConfiguration procedure
1. Enable IPv6 forwarding, and assign IPv6 addresses, and configure IPv6 unicast routing:
a. Enable IPv6 forwarding on each router and assign an IPv6 address and prefix length to each
interface according to
3076HFigure 411. (Details not shown.)
b. Configure OSPFv3 on the routers to make sure they are interoperable at the network layer and
they can dynamically update their routing information. (Details not shown.)
2. Enable IPv6 multicast routing, enable IPv6 PIM-SM on each interface and enable MLD and MLD
SSM mapping on the host-side interface:
# On the firewall, enable IPv6 multicast routing, enable MLD (version 2) and MLD SSM mapping
on GigabitEthernet 0/1, and enable IPv6 PIM-SM on each interface.
<Firewall> system-view
[Firewall] multicast ipv6 routing-enable
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] mld enable
[Firewall-GigabitEthernet0/1] mld version 2
[Firewall-GigabitEthernet0/1] mld ssm-mapping enable
[Firewall-GigabitEthernet0/1] pim ipv6 sm
[Firewall-GigabitEthernet0/1] quit
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] pim ipv6 sm
[Firewall-GigabitEthernet0/2] quit
[Firewall] interface gigabitethernet 0/3
[Firewall-GigabitEthernet0/3] pim ipv6 sm
[Firewall-GigabitEthernet0/3] quit