R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101
ii
Protocols and standards ······································································································································· 62
AFT configuration task list ············································································································································· 62
Configuring AFT ····························································································································································· 63
Configuration prerequisites ·································································································································· 63
Enabling AFT ·························································································································································· 63
Configuring a DNS64 prefix ······························································································································· 64
Configuring an IVI prefix ······································································································································ 64
Configuring a 6to4 AFT policy ···························································································································· 64
Configuring 4to6 AFT policies ····························································································································· 65
Displaying and maintaining AFT ·································································································································· 66
AFT configuration examples ········································································································································· 66
An IPv6 host with an IVI address initiates communication with an IPv4 host ················································· 66
An IPv4 host initiates communication with an IPv6 host ··················································································· 68
Configuring the DNS64 function of AFT ············································································································· 70
Troubleshooting AFT ······················································································································································ 74
Symptom 1 ····························································································································································· 74
Symptom 2 ····························································································································································· 74
Configuring tunneling ················································································································································ 75
Overview ········································································································································································· 75
IPv6 over IPv4 tunnels ··········································································································································· 75
IPv4 over IPv4 tunneling ······································································································································· 78
IPv4 over IPv6 tunneling ······································································································································· 79
IPv6 over IPv6 tunneling ······································································································································· 82
Protocols and standards ······································································································································· 82
Tunneling configuration task list ··································································································································· 83
Configuring a tunnel interface ······································································································································ 83
Configuring an IPv6 manual tunnel ······························································································································ 84
Configuration prerequisites ·································································································································· 84
Configuration guidelines ······································································································································ 84
Configuration procedure ······································································································································ 84
Configuration example ········································································································································· 85
Configuring a 6to4 tunnel ············································································································································· 88
Configuration prerequisites ·································································································································· 88
Configuration guidelines ······································································································································ 88
Configuration procedure ······································································································································ 89
6to4 tunnel configuration example ····················································································································· 89
6to4 relay configuration example ······················································································································· 91
Configuring an ISATAP tunnel ······································································································································ 94
Configuration prerequisites ·································································································································· 94
Configuration guidelines ······································································································································ 94
Configuration procedure ······································································································································ 94
Configuration example ········································································································································· 95
Configuring an IPv4 over IPv4 tunnel ·························································································································· 97
Configuration prerequisites ·································································································································· 97
Configuration guidelines ······································································································································ 97
Configuration procedure ······································································································································ 98
Configuration example ········································································································································· 98
Configuring an IPv4 over IPv6 manual tunnel ··········································································································· 101
Configuration prerequisites ································································································································ 101
Configuration guidelines ···································································································································· 101
Configuration procedure ···································································································································· 102
Configuration example ······································································································································· 102
Configuring a DS-lite tunnel ········································································································································ 105
Configuration prerequisites ································································································································ 105