F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

103
# Configure a destination address for interface Tunnel 1 (IP address of GigabitEthernet 0/2 of
Firewall B).
[FirewallA-Tunnel1] destination 2002::22:1
[FirewallA-Tunnel1] quit
# Configure a static route destined for the IPv6 network Group 2 through interface Tunnel 1.
[FirewallA] ipv6 route-static 2002:3:: 64 tunnel 1
• Configure Firewall B:
# Enable IPv6.
<FirewallB> system-view
[FirewallB] ipv6
# Configure an IPv6 address for GigabitEthernet 0/1.
[FirewallB] interface gigabitethernet 0/1
[FirewallB-GigabitEthernet0/1] ipv6 address 2002:3::1 64
[FirewallB-GigabitEthernet0/1] quit
# Configure an IPv6 address for GigabitEthernet 0/2 (the physical interface of the tunnel).
[FirewallB] interface gigabitethernet 0/2
[FirewallB-GigabitEthernet0/2] ipv6 address 2002::22:1 64
[FirewallB-GigabitEthernet0/2] quit
# Create interface Tunnel 2.
[FirewallB] interface tunnel 2
# Configure an IPv6 address for interface Tunnel 2.
[FirewallB-Tunnel2] ipv6 address 3001::1:2 64
# Configure the tunnel encapsulation mode as IPv6 over IPv6.
[FirewallB-Tunnel2] tunnel-protocol ipv6-ipv6
# Configure the source address for interface Tunnel 2 (IP address of GigabitEthernet 0/2).
[FirewallB-Tunnel2] source 2002::22:1
# Configure the destination address for interface Tunnel 2 (IP address of GigabitEthernet 0/2 of
Firewall A).
[FirewallB-Tunnel2] destination 2002::11:1
[FirewallB-Tunnel2] quit
# Configure a static route destined for the IPv6 network Group 1 through interface Tunnel 2.
[FirewallB] ipv6 route-static 2002:1:: 64 tunnel 2
397BVerifying the configuration
# Display the status of the tunnel interfaces on Firewall A and Firewall B, respectively.
[FirewallA] display ipv6 interface tunnel 1
Tunnel1 current state :UP
Line protocol current state :UP
IPv6 is enabled, link-local address is FE80::2013:1
Global unicast address(es):
3001::1:1, subnet is 3001::/64
Joined group address(es):
FF02::1:FF13:1
FF02::1:FF01:1
FF02::1:FF00:0
FF02::2