F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

Figure 59 Principle of IPv4 over IPv4 tunneling

Packets traveling through a tunnel undergo encapsulation and de-encapsulation, as shown in 697HFigure 59.

• Encapsulation:

a. Device A receives an IP packet from an IPv4 host and submits it to the IP protocol stack.

b. The IP protocol stack determines how to forward the packet according to the destination

address in the IP header. If the packet is destined for the IPv4 host connected to Device B,

Device A delivers the packet to the tunnel interface.

c. The tunnel interface adds a new IPv4 header to the IPv4 packet and submits to the IP protocol

stack. In the new header, the source IP address specifies the tunnel source and the destination

IP address specifies the tunnel destination. The IP protocol stack uses the destination IP address

of the new IP header to look up the routing table and sends the packet out.

• De-encapsulation:

d. After receiving the packet, Device A delivers it to the IP protocol stack.

e. If the protocol number is 4 (indicating an IPv4 packet is encapsulated within the packet), the IP

protocol stack delivers the packet to the tunnel module for de-encapsulation.

f. The tunnel module de-encapsulates the IP packet and sends it back to the IP protocol stack.

g. The protocol stack forwards the de-encapsulated packet.

124BIPv4 over IPv6 tunneling

The following matrix shows the feature and hardware compatibility:

Hardware IPv4 over IPv6 tunnelin

com

atible

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 Yes

Firewall module Yes

U200-A Yes

U200-S No

IPv4 over IPv6 tunneling enables isolated IPv4 networks to communicate with each other over an IPv6

network.