R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

85
Ste
p
Command Remarks
4. Configure an IPv6 address
for the tunnel interface.
• Configure a global unicast IPv6
address or a site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length
eui-64
• Configure a link-local IPv6
address:
{ ipv6 address auto link-local
{ ipv6 address ipv6-address
link-local
The link-local IPv6 address
configuration is optional.
By default,
• No IPv6 global unicast address
or site-local address is
configured for the tunnel
interface.
• A link-local address will
automatically be created when
an IPv6 global unicast address
or site-local address is
configured.
5. Specify the IPv6 manual
tunnel mode.
tunnel-protocol ipv6-ipv4
By default, the tunnel mode is GRE
over IPv4.
The same tunnel mode should be
configured at both ends of the
tunnel. Otherwise, packet delivery
will fail.
6. Configure a source address
or interface for the tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or
interface is configured for the tunnel.
7. Configure a destination
address for the tunnel.
destination ip-address
By default, no destination address is
configured for the tunnel.
8. Return to system view.
quit N/A
9. Enable dropping of IPv6
packets using
IPv4-compatible IPv6
addresses.
tunnel discard
ipv4-compatible-packet
Optional.
Disabled by default.
Configuration example
NOTE:
In this configuration example, either Router A or Router B is the firewall.
Network requirements
As shown in Figure 72, two IPv6 networks are connected over an IPv4 network. An IPv6 over IPv4 tunnel
need be configured between Router A and Router B to make the two IPv6 networks reachable to each
other. If the destination IPv4 address cannot be automatically obtained from the destination IPv6
addresses of packets, configure an IPv6 manual tunnel.