HP VPN Firewall Appliances VPN Configuration Guide

Step Command Remarks

9. Return to system view.

quit N/A

10. Enable dropping of IPv6

packets using

IPv4-compatible IPv6

addresses.

tunnel discard ipv4-compatible-packet

Optional.

The default setting is

disabled.

Configuration example

Network requirements

As shown in Figure 72, configure an IPv6 over IPv6 tunnel between Firewall A and Firewall B so the two

IPv6 networks can reach each other without disclosing their IPv6 addresses.

Figure 72 Network diagram

Configuration procedure

Make sure Firewall A and Firewall B can reach each other through IPv6.

• Configure Firewall A:

# Enable IPv6.

<FirewallA> system-view

[FirewallA] ipv6

# Configure an IPv6 address for GigabitEthernet 0/1.

[FirewallA] interface gigabitethernet 0/1

[FirewallA-GigabitEthernet0/1] ipv6 address 2002:1::1 64

[FirewallA-GigabitEthernet0/1] quit

# Configure an IPv6 address for GigabitEthernet 0/2, which is the physical interface of the tunnel.

[FirewallA] interface gigabitethernet 0/2

[FirewallA-GigabitEthernet 0/2] ipv6 address 2002::11:1 64

[FirewallA-GigabitEthernet 0/2] quit

# Create interface Tunnel 1.

[FirewallA] interface tunnel 1

# Configure an IPv6 address for interface Tunnel 1.

[FirewallA-Tunnel1] ipv6 address 3001::1:1 64

# Configure the tunnel encapsulation mode as IPv6 over IPv6.

[FirewallA-Tunnel1] tunnel-protocol ipv6-ipv6

# Specify the IP address of GigabitEthernet 0/2 as the source address for interface Tunnel 1.