F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

92
Ste
p
Command Remarks
7. Configure the
destination address for
the tunnel interface.
destination ipv6-address
By default, no destination address is
configured for the tunnel.
31B
Configuration example
389BNetwork requirements
As shown in 719HFigure 70, configure an IPv4 over IPv6 manual tunnel between Firewall A and Firewall B so
the two IPv4 networks can reach each other over the IPv6 network.
Figure 70 Network diagram
390BConfiguration procedure
Make sure Firewall A and Firewall B can reach each other through IPv6.
• Configure Firewall A:
# Enable IPv6.
<FirewallA> system-view
[FirewallA] ipv6
# Configure an IPv4 address for GigabitEthernet 0/1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] ip address 30.1.1.1 255.255.255.0
[FirewallA-GigabitEthernet0/1] quit
# Configure an IPv6 address for GigabitEthernet 0/2 (the physical interface of the tunnel).
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] ipv6 address 2002::1:1 64
[FirewallA-GigabitEthernet0/2] quit
# Create interface Tunnel 1.
[FirewallA] interface tunnel 1
# Configure an IPv4 address for interface Tunnel 1.
[FirewallA-Tunnel1] ip address 30.1.2.1 255.255.255.0
# Configure the tunnel encapsulation mode as IPv4 over IPv6.
[FirewallA-Tunnel1] tunnel-protocol ipv4-ipv6
# Configure the source address for interface Tunnel 1 (IP address of GigabitEthernet 0/2).
[FirewallA-Tunnel1] source 2002::1:1
# Configure the destination address for interface Tunnel 1 (IP address of GigabitEthernet 0/2 of
Firewall B).
GE0/2
2002::1:1/64
GE0/1
30.1.3.1/24
GE0/1
30.1.1.1/24
Firewall A
IPv6 network
IPv4
Group 1
Tunnel1
30.1.2.1/24
GE0/2
2002::2:1/64
Tunnel2
30.1.2.2/24
IPv4
Group 2
Firewall B
IPv4 over IPv6 tunnel