HP VPN Firewall Appliances VPN Configuration Guide

98
• The IPv6 address of the tunnel interface cannot be on the same subnet as the destination address
configured for the tunnel interface.
• The destination address of the route passing the tunnel interface cannot be on the same subnet as
the destination address configured for the tunnel interface.
• Two or more tunnel interfaces using the same encapsulation protocol must have different source and
destination addresses.
• If you specify a source interface instead of a source address for the tunnel, the source address of the
tunnel is the primary IP address of the source interface.
• Only the IPv6 over IPv6 tunnel has a maximum number of nested encapsulations for a packet.
Configuration procedure
To configure an IPv6 over IPv6 tunnel:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enable IPv6.
ipv6
By default, the IPv6 packet
forwarding function is
disabled.
3. Enter tunnel interface view.
Interface tunnel number N/A
4. Configure an IPv6 address
for the tunnel interface.
• (Method 1) Configure an IPv6 global
unicast address or site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length eui-64
• (Method 2) Configure an IPv6
link-local address:
{ ipv6 address auto link-local
{ ipv6 address ipv6-address
link-local
Use either method.
By default, no IPv6 address is
configured for the tunnel
interface.
5. Specify the IPv6 over IPv6
tunnel mode.
tunnel-protocol ipv6-ipv6
The default tunnel mode is
GRE over IPv4 mode. The
same tunnel mode should be
configured at both ends of the
tunnel. Otherwise, packet
delivery fails.
6. Configure a source address
or interface for the tunnel
interface.
source { ipv6-address | interface-type
interface-number }
By default, no source address
or interface is configured for
the tunnel.
7. Configure the destination
address for the tunnel
interface.
destination ipv6-address
By default, no destination
address is configured for the
tunnel.
8. Configure the maximum
number of nested
encapsulations of a packet.
encapsulation-limit [ number ]
Optional.
4 by default.