F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

67
Figure 62 Packet forwarding process in DS-lite
When a gateway serves as the CPE, the changes of source and destination IP addresses and port
numbers are illustrated in
700HFigure 62. The entire process is summarized as follows:
{ The CPE and AFTR encapsulate and de-encapsulate packets.
{ The AFTR performs NAT.
When a host serves as the CPE, the process is similar and therefore is not shown.
NAT supports both basic address translation between private and public addresses and Network
Address Port Translation (NAPT), which translates both IP address (private or public) and port
number.
701HFigure 62 shows an example of NAPT. For more information about NAT, see NAT and
ALG Configuration Guide.
DS-lite tunnel supports only an IPv4 host in a private network initiating communication with an IPv4
host on the Internet and does not support an IPv4 host on the Internet initiating communication with
an IPv4 host in a private network.
125BIPv6 over IPv6 tunneling
The following matrix shows the feature and hardware compatibility:
Hardware IPv6 over IPv6 tunnelin
g
com
p
atible
F1000-A-EI/F1000-S-EI Yes
F1000-E Yes
F5000 Yes