F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

102
Ste
p
Command Remarks
9. Return to system view. quit N/A
10. Enable dropping of IPv6
packets using
IPv4-compatible IPv6
addresses.
tunnel discard ipv4-compatible-packet
Optional.
The default setting is
disabled.
161BConfiguration example
395BNetwork requirements
As shown in 722HFigure 72, configure an IPv6 over IPv6 tunnel between Firewall A and Firewall B so the two
IPv6 networks can reach each other without disclosing their IPv6 addresses.
Figure 72 Network diagram
396BConfiguration procedure
Make sure Firewall A and Firewall B can reach each other through IPv6.
• Configure Firewall A:
# Enable IPv6.
<FirewallA> system-view
[FirewallA] ipv6
# Configure an IPv6 address for GigabitEthernet 0/1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] ipv6 address 2002:1::1 64
[FirewallA-GigabitEthernet0/1] quit
# Configure an IPv6 address for GigabitEthernet 0/2 (the physical interface of the tunnel).
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet 0/2] ipv6 address 2002::11:1 64
[FirewallA-GigabitEthernet 0/2] quit
# Create interface Tunnel 1.
[FirewallA] interface tunnel 1
# Configure an IPv6 address for interface Tunnel 1.
[FirewallA-Tunnel1] ipv6 address 3001::1:1 64
# Configure the tunnel encapsulation mode as IPv6 over IPv6.
[FirewallA-Tunnel1] tunnel-protocol ipv6-ipv6
# Configure a source address for interface Tunnel 1 (IP address of GigabitEthernet 0/2).
[FirewallA-Tunnel1] source 2002::11:1