F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

75
• No destination address needs to be configured for an automatic IPv4-compatible IPv6 tunnel.
Because the destination address of the tunnel is embedded in the destination IPv4-compatible IPv6
address of packets.
• The tunnel interfaces using the same encapsulation protocol cannot use the same source IP address.
136BConfiguration procedure
To configure an automatic IPv4-compatible IPv6 tunnel:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable the IPv6
packet forwarding
function.
ipv6
By default, the IPv6 packet forwarding
function is disabled.
3. Enter tunnel interface
view.
interface tunnel number N/A
4. Configure an IPv6
address for the
tunnel interface.
• Configure an IPv6 global unicast
address or a site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length
eui-64
• Configure an IPv6 link-local
address:
{ ipv6 address auto link-local
{ ipv6 address ipv6-address
link-local
The IPv6 link-local address configuration is
optional.
By default:
• No IPv6 global unicast address or
site-local address is configured for the
tunnel interface.
• A link-local address is automatically
generated when an IPv6 global unicast
or site-local address is configured for
the interface.
5. Specify the
automatic
IPv4-compatible IPv6
tunnel mode.
tunnel-protocol ipv6-ipv4
auto-tunnel
The default tunnel mode is GRE over IPv4
mode. The same tunnel mode should be
configured at both ends of the tunnel.
Otherwise, packet delivery fails.
6. Configure a source
address or interface
for the tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or interface
is configured for the tunnel.
137BConfiguration example
373BNetwork requirements
As shown in 714HFigure 65, dual-stack firewalls, Firewall A and Firewall B communicate over an IPv4 network.
Configure an automatic IPv4-compatible IPv6 tunnel between the two firewalls to enable IPv6
communications other over the IPv4 network.