R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

15
Configuration procedure
To configure a GRE over IPv6 tunnel:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable the IPv6 packet
forwarding function.
ipv6 Disabled by default.
3. Create a tunnel interface and
enter tunnel interface view.
interface tunnel interface-number
By default, no tunnel interface is
created on the firewall.
4. Configure an IPv4 address for
the tunnel interface.
ip address ip-address { mask |
mask-length }
By default, no IPv4 address is
configured for a tunnel interface.
5. Set the tunnel mode to GRE
over IPv6.
tunnel-protocol gre ipv6
The default tunnel mode is GRE
over IPv6.
You must configure the same tunnel
mode on both ends of a tunnel.
Otherwise, packet delivery will
fail.
6. Configure the source address
or interface for the tunnel
interface.
source { ipv6-address |
interface-type interface-number }
By default, no source address or
interface is configured for a tunnel
interface.
7. Configure the destination
address for the tunnel
interface.
destination ipv6-address
By default, no destination address
is configured for a tunnel interface.
8. Set the maximum number of
encapsulations in the tunnel.
encapsulation-limit [ number ]
Optional.
4 by default.
9. Enable the GRE packet
checksum function.
gre checksum
Optional.
Disabled by default.
10. Configure the key for the GRE
tunnel interface.
gre key key-number
Optional.
By default, no key is configured for
a GRE tunnel interface.
The two ends of a tunnel must have
the same key or have no key at the
same time.
11. Return to system view.
quit N/A
12. Configure the firewall to
discard the IPv4-compatible
IPv6 packets.
tunnel discard
ipv4-compatible-packet
Optional.
By default, the firewall does not
discard the IPv4-compatible IPv6
packets.
13. Configure a route for packet
forwarding through the
tunnel.
See Network Management
Configuration Guide
Each end of the tunnel must have a
route (static or dynamic) through
the tunnel to the other end.
NOTE:
For more information about tunnel interfaces and related configurations, see "Configuring tunneling."