F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100
71
132BConfiguration procedure
To configure an IPv6 manual tunnel:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enable IPv6.
ipv6
By default, the IPv6 packet forwarding
function is disabled.
3. Enter tunnel
interface view.
interface tunnel number N/A
4. Configure an IPv6
address for the
tunnel interface.
• Configure a global unicast IPv6
address or a site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length
eui-64
• Configure a link-local IPv6 address:
{ ipv6 addres
s auto link-local
{
ipv6 address
ipv6-address
link-local
The link-local IPv6 address configuration
is optional.
By default:
• No IPv6 global unicast address or
site-local address is configured for the
tunnel interface.
• A link-local address is automatically
created when an IPv6 global unicast
address or site-local address is
configured.
5. Specify the IPv6
manual tunnel
mode.
tunnel-protocol ipv6-ipv4
The default tunnel mode is GRE over IPv4
mode. The same tunnel mode should be
configured at both ends of the tunnel.
Otherwise, packet delivery fails.
6. Configure a source
address or
interface for the
tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or
interface is configured for the tunnel.
7. Configure a
destination
address for the
tunnel interface.
destination ip-address
By default, no destination address is
configured for the tunnel.
8. Return to system
view.
quit N/A
9. Enable dropping
of IPv6 packets
using
IPv4-compatible
IPv6 addresses.
tunnel discard ipv4-compatible-packet
Optional.
This feature is disabled by default.
133BConfiguration example
370BNetwork requirements
As shown in 713HFigure 64, configure an IPv4 network between Firewall A and Firewall B so the two IPv6
networks can reach each other over the IPv4 network. The tunnel destination IPv4 address cannot be
automatically obtained from the destination IPv6 addresses of packets. Therefore, configure an IPv6
manual tunnel.