F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

27B

Configuring a 6to4 tunnel

The following matrix shows the feature and hardware compatibility:

Hardware 6to4 tunnel

com

atible

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 Yes

Firewall module Yes

U200-A Yes

U200-S No

138BConfiguration prerequisites

Configure an IP address for the interface (such as a VLAN interface, Ethernet interface, or loopback

interface) to be configured as the source interface of the tunnel interface.

139BConfiguration guidelines

Follow these guidelines when you configure a 6to4 tunnel:

• No destination address needs to be configured for a 6to4 tunnel because the destination IPv4

address is embedded in the 6to4 IPv6 address.

• Because automatic tunnels do not support dynamic routing, you must configure a static route

destined for the destination IPv6 network at each tunnel end. You can specify the local tunnel

interface as the output interface of the route or specify the IPv6 address of the peer tunnel interface

as the next hop of the route. For the detailed configuration, see Network Management

Configuration Guide.

• The automatic tunnel interfaces using the same encapsulation protocol cannot use the same source

IP address.

140BConfiguration procedure

To configure a 6to4 tunnel:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Enable IPv6. ipv6

By default, the IPv6 packet

forwarding function is disabled.

3. Enter tunnel interface

view.

interface tunnel number N/A