HP VPN Firewall Appliances VPN Configuration Guide

97
Tunnel bandwidth 64 (kbps)
Tunnel protocol/transport IP/IPv6 dslite-aftr
Output queue : (Urgent queuing : Size/Length/Discards) 0/100/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last clearing of counters: Never
Last 300 seconds input: 0 bytes/sec, 0 packets/sec
Last 300 seconds output: 0 bytes/sec, 0 packets/sec
65 packets input, 3900 bytes
0 input error
65 packets output, 3900 bytes
0 output error
# Ping the IPv4 host on the public network from the IPv4 host on the private network:
[FirewallA] ping –a 10.0.0.2 20.1.1.2
PING 20.1.1.2: 56 data bytes, press CTRL_C to break
Reply from 20.1.1.2: bytes=56 Sequence=1 ttl=255 time=1 ms
Reply from 20.1.1.2: bytes=56 Sequence=2 ttl=255 time=1 ms
Reply from 20.1.1.2: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 20.1.1.2: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 20.1.1.2: bytes=56 Sequence=5 ttl=255 time=1 ms
--- 20.1.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/1 ms
Configuring an IPv6 over IPv6 tunnel
Configuration prerequisites
Configure an IPv6 address for the interface (such as a VLAN interface, Ethernet interface, or loopback
interface) to be configured as the source interface of the tunnel interface.
Configuration guidelines
Follow these guidelines when you configure an IPv6 over IPv6 tunnel:
• If the two tunnel interfaces at the tunnel ends reside on different subnets, you must configure a static
route or dynamic routing at each tunnel end so that the tunnel interfaces can reach other over the
tunnel.
• If the destination IPv6 network is not on the same subnet as the IPv6 address of the local tunnel
interface, you must configure a route destined for the destination IPv6 network through the tunnel
interface. You can configure a static route, and specify the local tunnel interface as the output
interface or specify the IPv6 address of the peer tunnel interface as the next hop. Alternatively, you
can enable a dynamic routing protocol on both tunnel interfaces to achieve the same purpose. For
more configurations about IPv6 static routes or other routing protocols, see Network Management
Configuration Guide.