R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

15
Parameters
ivi-prefix: IVI prefix of an IPv6 address.
Description
Use aft prefix-ivi to specify an IVI prefix.
Use undo aft prefix-ivi to delete a specified IVI prefix.
By default, no IVI prefix is specified.
The length of an IVI prefix is 32 bits. If an IPv6 address matches the specified IVI prefix format, AFT
extracts the IPv4 address embedded in the IPv6 address to translate the IPv6 address into an IPv4
address.
NOTE:
The DNS64 prefix cannot be the same as the IVI prefix. Otherwise, an IPv6 host cannot communicate with
another IPv6 host whose address has an IVI prefix the AFT device performs address translation for the
packet and send it to the IPv4 network.
Related commands: display aft all.
Examples
# Specify the IVI prefix as 3000:db8e::.
<Sysname> system-view
[Sysname] aft prefix-ivi 3000:db8e::
aft v4tov6
Syntax
aft v4tov6 acl number acl-number { prefix-dns64 dns64-prefix prefix-length | prefix-ivi ivi-prefix }
undo aft v4tov6 acl number acl-number
View
System view
Default Level
2: System level
Parameters
acl number acl-number: Specifies the number of an IPv4 access control list (ACL), in the range of 2000
to 3999.
prefix-dns64 dns64-prefix prefix-length: Specifies the DNS64 prefix, which is used to translate source
IPv4 addresses into IPv6 addresses for packets that match the specified ACL. The dns64-prefix argument
represents the DNS64 prefix, and the prefix-length argument represents the length of the prefix, which
can be 32, 40, 48, 56, 64, or 96 bits.
prefix-ivi ivi-prefix: Specifies the IVI prefix. If the destination IPv4 address of an IPv4-to-IPv6 packet
matches the specified ACL, the AFT translates the destination IPv4 address into an IPv6 address by using
the IVI prefix. The ivi-prefix argument represents the IVI prefix.
Description
Use aft v4tov6 to configure a 4to6 AFT policy.