HP VPN Firewall Appliances VPN Configuration Guide

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

Ste

Command

Remarks

13. Configure the device to discard

the IPv4-compatible IPv6

packets.

tunnel discard

ipv4-compatible-packet

Optional.

By default, the device does not

discard the IPv4-compatible IPv6

packets.

For information about tunnel interfaces, more configuration commands in a tunnel interface, and the

expedite termination function, see VPN Command Reference.

Configuring a GRE over IPv6 tunnel

Configuration guidelines

Follow these guidelines when you configure a GRE over IPv6 tunnel:

• Deleting a tunnel interface also deletes the functions configured on this tunnel interface.

• The source address and destination address of a tunnel uniquely identify a path. You must configure

the tunnel source address and destination address at both ends of a tunnel and the tunnel source or

destination address at one end must be the tunnel destination or source address at the other end.

• Tunnel interfaces using the same encapsulation protocol must have different source addresses and

destination addresses.

• If you configure a source interface for a tunnel interface, the tunnel interface takes the primary IP

address of the source interface as its source address.

• You can enable or disable the checksum function at both ends of a tunnel.

{ If checksum is enabled at the local end but not at the remote end, the local end calculates the

checksum of a packet to be sent but does not check the checksum of a received packet.

{ If checksum is enabled at the remote end but not at the local end, the local end checks the

checksum of a received packet but does not calculate the checksum of a packet to be sent.

• You can use the following methods to configure a route to a destination over the GRE tunnel:

{ Configure a static route, using the destination address of the original packet as the destination

address of the route and the address of the peer tunnel interface as the next hop.

{ Enable a dynamic routing protocol on both the tunnel interface and the interface connecting the

private network, so the dynamic routing protocol can establish a routing entry with the tunnel

interface as the outgoing interface.

• The IPv6 address of the tunnel interface and the tunnel destination address configured on the tunnel

interface must be in different subnets.

Configuration prerequisites

Configure an IPv6 address for the interface (such as a VLAN interface, an Ethernet interface, or a

Loopback interface) to be used as the source interface of the tunnel interface.

Configuration procedure

To configure a GRE over IPv6 tunnel:

Ste

Command

Remarks

1. Enter system view.

system-view N/A