HP VPN Firewall Appliances NAT and ALG Configuration Guide
39
• If the destination IPv4 address in a packet sent from an IPv4 host to an IPv6 host matches the static
mapping, the destination IPv4 address is translated into the corresponding IPv6 address.
To configure a static IPv4/IPv6 address mapping on the IPv6 side:
Ste
p
Command
1. Enter system view.
system-view
2. Configure a static IPv4/IPv6 address mapping
on the IPv6 side.
natpt v6bound static ipv6-address ipv4-address
Configuring a dynamic mapping policy on the IPv6 side
A dynamic IPv4/IPv6 mapping policy on the IPv6 side is that if the source IPv6 address matches a
specific IPv6 ACL or the destination IPv6 address is the same as the specified NAT-PT prefix, the source
IPv6 address will be translated into an IPv4 address in a specific NAT-PT address pool or the IPv4
address of a specific interface. For ACL configuration, see Access Control Configuration Guide.
The device provides four dynamic mapping policies:
• Policy 1—Associate an IPv6 ACL with an address pool.
If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6 address will
be translated into an IPv4 address in the specified address pool.
• Policy 2—Associate an IPv6 ACL with an interface address.
If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6 address will
be translated into the IPv4 address of the specified interface.
• Policy 3—Associate a NAT-PT prefix with an address pool.
If the destination IPv6 address of a packet matches the NAT-PT prefix, the source IPv6 address will
be translated into an IPv4 address in the specified address pool.
• Policy 4—Associate a NAT-PT prefix with an interface address.
If the destination IPv6 address of a packet matches the NAT-PT prefix, the source IPv6 address will
be translated into the IPv4 address of the specified interface.
To use policy 1 or 3, configure a NAT-PT address pool first.
A NAT-PT address pool is a group of contiguous IPv4 addresses and is used to translate an IPv6 address
into an IPv4 address dynamically. When an IPv6 packet is sent from an IPv6 network to an IPv4 network,
if policy 1 or 3 is set, the NAT-PT device will select an IPv4 address from the NAT-PT address pool as the
source IPv4 address of the IPv6 packet.
To configure a dynamic IPv4/IPv6 address mapping policy on the IPv6 side:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A