R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

102
• If you specify a source interface instead of a source address for the tunnel, the source address of the
tunnel is the primary IP address of the source interface.
Configuration procedure
To configure an IPv4 over IPv6 manual tunnel:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable IPv6.
ipv6
By default, the IPv6 packet forwarding
function is disabled.
3. Enter tunnel interface
view.
interface tunnel number N/A
4. Configure an IPv4
address for the tunnel
interface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IPv4 address is configured
for the tunnel interface.
5. Specify the IPv4 over
IPv6 manual tunnel
mode.
tunnel-protocol ipv4-ipv6
Optional.
By default, the tunnel mode is GRE over
IPv4.
The same tunnel mode should be
configured at both ends of the tunnel.
Otherwise, packet delivery will fail.
6. Configure the source
address or interface for
the tunnel interface.
source { ipv6-address |
interface-type interface-number }
By default, no source address or interface
is configured for the tunnel.
7. Configure the
destination address for
the tunnel interface.
destination ipv6-address
By default, no destination address is
configured for the tunnel.
Configuration example
NOTE:
In this configuration example, either Router A or Router B is the firewall.
Network requirements
As shown in Figure 77, the two IPv4 subnets Group 1 and Group 2 are connected over an IPv6 network.
Configure an IPv4 over IPv6 manual tunnel between Router A and Router B to make the two subnets
reachable to each other.