F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

399

83B

AFT configuration examples

289BAn IPv6 host with an IVI address initiates communication with

an IPv4 host

588BNetwork requirements

As shown in 1028HFigure 302, Host A is in an IPv6 network and has an address of 6:0:ff06:606:200::, and

Host C is in an IPv4 network and has an address of 4.4.4.2. Host A wishes to communicate with Host

Figure 302 An IPv6 host with an IVI address initiates communication with an IPv4 host

589BConfiguration consideration

The IPv6 address of Host A is an IVI address. For Host A to communicate with Host B, enable AFT, and

configure DNS64 and IVI prefixes on Firewall.

590BConfiguration procedure

1. Configure Firewall (the AFT):

# Enable IPv6.

<Firewall> system-view

[Firewall] ipv6

# Configure IP addresses for the interfaces GigabitEthernet 0/1 and GigabitEthernet 0/2 and

enable AFT on the interfaces.

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] ipv6 address 6:0:ff06:606:100::/64

[Firewall-GigabitEthernet0/1] aft enable

[Firewall-GigabitEthernet0/1] quit

[Firewall] interface gigabitethernet 0/2

[Firewall-GigabitEthernet0/2] ip address 4.4.4.1 24

[Firewall-GigabitEthernet0/2] aft enable

[Firewall-GigabitEthernet0/2] quit

# Configure the DNS64 prefix.

[Firewall] aft prefix-dns64 2000:: 32

# Configure the IVI prefix.

[Firewall] aft prefix-ivi 6::

2. Configure Host A:

Perform the following configurations on Host A. (Details not shown.)

{ Configure IPv6 address 6:0:ff06:606:200::/64.