R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

95
Ste
p
Command Remarks
5. Specify the ISATAP
tunnel mode.
tunnel-protocol ipv6-ipv4 isatap
By default, the tunnel mode is GRE
over IPv4.
The same tunnel mode should be
configured at both ends of the
tunnel. Otherwise, packet delivery
will fail.
6. Configure a source
address or interface for
the tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or
interface is configured for the tunnel.
7. Return to system view.
quit N/A
8. Enable dropping of IPv6
packets using
IPv4-compatible IPv6
addresses.
tunnel discard ipv4-compatible-packet
Optional.
Disabled by default.
Configuration example
Network requirements
As shown in Figure 75, an IPv6 network is connected to an IPv4 network through an ISATAP router
(Firewall). IPv6 hosts reside in the IPv4 network. Configure the IPv6 hosts to access the IPv6 network
through the ISATAP tunnel.
Figure 75 Network diagram
Configuration procedure
NOTE:
Before configuring an ISATAP tunnel, make sure that GigabitEthernet 0/1 on the ISATAP router and the
ISATAP host are reachable to each other.
• Configure the Firewall:
# Enable IPv6.
<Firewall> system-view
[Firewall] ipv6
# Configure addresses for interfaces.
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] ipv6 address 3001::1/64
[Firewall-GigabitEthernet0/2] quit
[Firewall] interface gigabitethernet 0/1
IPv6 network
GE0/1
1.1.1.1/8
GE0/2
3001::1/64
ISATAP router
IPv6 host
ISATAP host
IPv4 address:2.1.1.2/32
IPv6 address:
FE80::5EFE:0201:0102
2001::5EFE:0201:0102
3002::2/64
IPv4 network
ISATAP tunnel
Tunnel0
2001::5EFE:0101:0101/64
Firewall