R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

GRE over IPv6 tunnel configuration example

NOTE:

In this configuration example, either Router A or Router B is the firewall.

Network requirements

Two IPv4 subnets Group 1 and Group 2 are connected to an IPv6 network. Create a GRE over IPv6

tunnel between Router A and Router B, so that the two IPv4 subnets can communicate with each other

through the GRE tunnel over the IPv6 network.

Figure 15 Network diagram for a GRE over IPv6 tunnel

Configuration procedure

Before the configuration, make sure Router A and Router B can reach each other.

1. Configure Router A:

<RouterA> system-view

# Enable IPv6.

[RouterA] ipv6

# Configure an IPv4 address for interface GigabitEthernet 0/1.

[RouterA] interface gigabitethernet 0/1

[RouterA-GigabitEthernet0/1] ip address 10.1.1.1 255.255.255.0

[RouterA-GigabitEthernet0/1] quit

# Configure an IPv6 address for interface GigabitEthernet 0/2, the physical interface of the tunnel.

[RouterA] interface gigabitethernet 0/2

[RouterA-GigabitEthernet0/2] ipv6 address 2002::1:1 64

[RouterA-GigabitEthernet0/2] quit

# Create a tunnel interface Tunnel0.

[RouterA] interface tunnel 0

# Configure an IPv4 address for interface Tunnel0.

[RouterA-Tunnel0] ip address 10.1.2.1 255.255.255.0

# Configure the tunnel encapsulation mode as GRE over IPv6.

[RouterA-Tunnel0] tunnel-protocol gre ipv6

# Configure the source address of interface Tunnel0 to be the IP address of interface GigabitEthernet

0/2.

[RouterA-Tunnel0] source 2002::1:1

# Configure the destination address of interface Tunnel0 to be the IP address of interface GigabitEthernet

0/2 on Router B).

[RouterA-Tunnel0] destination 2001::2:1

[RouterA-Tunnel0] quit