F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100
93
[FirewallA-Tunnel1] destination 2002::2:1
[FirewallA-Tunnel1] quit
# Configure a static route from Firewall A through interface Tunnel 1 to Group 2.
[FirewallA] ip route-static 30.1.3.0 255.255.255.0 tunnel 1
• Configure Firewall B:
# Enable IPv6.
<FirewallB> system-view
[FirewallB] ipv6
# Configure an IPv4 address for GigabitEthernet 0/1.
[FirewallB] interface gigabitethernet 0/1
[FirewallB-GigabitEthernet0/1] ip address 30.1.3.1 255.255.255.0
[FirewallB-GigabitEthernet0/1] quit
# Configure an IPv6 address for GigabitEthernet 0/2 (the physical interface of the tunnel).
[FirewallB] interface gigabitethernet 0/2
[FirewallB-GigabitEthernet0/2] ipv6 address 2002::2:1 64
[FirewallB-GigabitEthernet0/2] quit
# Create interface Tunnel 2.
[FirewallB] interface tunnel 2
# Configure an IPv4 address for interface Tunnel 2.
[FirewallB-Tunnel2] ip address 30.1.2.2 255.255.255.0
# Configure the tunnel encapsulation mode as IPv4 over IPv6.
[FirewallB-Tunnel2] tunnel-protocol ipv4-ipv6
# Configure the source address for interface Tunnel 2 (IP address of GigabitEthernet 0/2).
[FirewallB-Tunnel2] source 2002::2:1
# Configure a destination address for interface Tunnel 2 (IP address of GigabitEthernet 0/2 of
Firewall A).
[FirewallB-Tunnel2] destination 2002::1:1
[FirewallB-Tunnel2] quit
# Configure a static route from Firewall B through interface Tunnel 2 to Group 1.
[FirewallB] ip route-static 30.1.1.0 255.255.255.0 tunnel 2
391BVerifying the configuration
# Display the status of the tunnel interfaces on Firewall A and Firewall B, respectively.
[FirewallA] display interface tunnel 1
Tunnel1 current state: UP
Line protocol current state: UP
Description: Tunnel1 Interface
The Maximum Transmit Unit is 64000
Internet Address is 30.1.2.1/24 Primary
Encapsulation is TUNNEL, service-loopback-group ID not set
Tunnel source 2002::0001:0001, destination 2002::0002:0001
Tunnel protocol/transport IP/IPv6
Output queue : (Urgent queuing : Size/Length/Discards) 0/100/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last 300 seconds input: 0 bytes/sec, 0 packets/sec