F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100
13
• Deleting a tunnel interface also deletes the functions configured on this tunnel interface.
• The source address and destination address of a tunnel uniquely identify a path. You must configure
the tunnel source address and destination address at both ends of a tunnel and the tunnel source or
destination address at one end must be the tunnel destination or source address at the other end.
• Tunnel interfaces using the same encapsulation protocol must have different source addresses and
destination addresses.
• If you configure a source interface for a tunnel interface, the tunnel interface takes the primary IP
address of the source interface as its source address.
• You can enable or disable the checksum function at both ends of a tunnel.
{ If checksum is enabled at the local end but not at the remote end, the local end calculates the
checksum of a packet to be sent but does not check the checksum of a received packet.
{ If checksum is enabled at the remote end but not at the local end, the local end checks the
checksum of a received packet but does not calculate the checksum of a packet to be sent.
• You can use the following methods to configure a route to a destination over the GRE tunnel:
{ Configure a static route, using the destination address of the original packet as the destination
address of the route and the address of the peer tunnel interface as the next hop.
{ Enable a dynamic routing protocol on both the tunnel interface and the interface connecting
the private network, so the dynamic routing protocol can establish a routing entry with the
tunnel interface as the outgoing interface.
• The IPv6 address of the tunnel interface and the tunnel destination address configured on the tunnel
interface must be in different subnets.
336BConfiguration prerequisites
Configure an IPv6 address for the interface (such as a VLAN interface, an Ethernet interface, or a
Loopback interface) to be used as the source interface of the tunnel interface.
337BConfiguration procedure
To configure a GRE over IPv6 tunnel:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable the IPv6 packet
forwarding function.
ipv6 Disabled by default.
3. Create a tunnel interface and
enter tunnel interface view.
interface tunnel interface-number
By default, there is no tunnel
interface on a device.
4. Configure an IPv4 address for
the tunnel interface.
ip address ip-address { mask |
mask-length }
By default, no IPv4 address is
configured for a tunnel interface.
5. Set the tunnel mode to GRE
over IPv6.
tunnel-protocol gre ipv6
The default tunnel mode is GRE
over IPv4.
You must configure the same tunnel
mode on both ends of a tunnel.
Otherwise, packet delivery will
fail.
6. Configure the source address
or interface for the tunnel
interface.
source { ipv6-address |
interface-type interface-number }
By default, no source address or
interface is configured for a tunnel
interface.