R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

230
• Tunnel interfaces using the same encapsulation protocol must have different source and destination
addresses.
• If you configure the source interface for the tunnel, the primary IP address of the source interface is
the source address of the tunnel.
• Configuring a destination address on the AFTR is unnecessary. When receiving a packet from the
tunnel, the AFTR records the source IPv6 address of the packet and uses it as the IPv6 address of the
tunnel destination (address of the CPE).
• Enable NAT on the AFTR's interface which is connected to the Internet. AFTR does not support static
NAT mappings or VPN instance matching. If an ACL rule includes a VPN instance, the rule does not
take effect.
• A CPE tunnel interface can establish tunnel with only one AFTR tunnel interface, but an AFTR tunnel
interface can establish tunnels with multiple CPE tunnel interfaces.
To configure the AFTR of a DS-Lite tunnel:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enable IPv6.
ipv6
By default, the IPv6 packet
forwarding function is disabled.
3. Enter tunnel interface view.
interface tunnel number N/A
4. Configure an IPv4 address for
the tunnel interface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IPv4 address is
configured for the tunnel interface.
5. Specify the DS-Lite AFTR tunnel
mode.
tunnel-protocol ipv4-ipv6
dslite-aftr
The tunnel mode at the other end of
the tunnel should be DS-Lite CPE.
Otherwise, packet delivery fails.
6. Configure the source address
or interface for the tunnel
interface.
source { ipv6-address |
interface-type
interface-number }
By default, no source address or
interface is configured for the tunnel.
Configuration example
Network requirements
As shown in Figure 90, a private IPv4 network and a public IPv4 network are separated by an IPv6
network.
Build a DS-Lite tunnel between CPE (Router A) and AFTR (Router B) and configure NAT on AFTR's
interface connecting to the public IPv4 network, so that hosts in the private IPv4 network can access the
public IPv4 network and hosts from different private IPv4 networks can use the same IPv4 addresses.
In the IPv6 network, deploy a DHCPv6 server (Router C) for CPE to obtain AFTR's IPv6 address.