HP VPN Firewall Appliances VPN Configuration Guide

13
Ste
p
Command Remarks
2. Enable the IPv6 packet
forwarding function.
ipv6 Disabled by default.
3. Create a tunnel interface and
enter tunnel interface view.
interface tunnel interface-number
By default, there is no tunnel
interface on a device.
4. Configure an IPv4 address for
the tunnel interface.
ip address ip-address { mask |
mask-length }
By default, no IPv4 address is
configured for a tunnel interface.
5. Set the tunnel mode to GRE
over IPv6.
tunnel-protocol gre ipv6
The default tunnel mode is GRE
over IPv4.
You must configure the same tunnel
mode on both ends of a tunnel.
Otherwise, packet delivery will
fail.
6. Configure the source address
or interface for the tunnel
interface.
source { ipv6-address |
interface-type interface-number }
By default, no source address or
interface is configured for a tunnel
interface.
7. Configure the destination
address for the tunnel
interface.
destination ipv6-address
By default, no destination address
is configured for a tunnel interface.
8. Set the maximum number of
encapsulations in the tunnel.
encapsulation-limit [ number ]
Optional.
4 by default.
9. Enable the GRE packet
checksum function.
gre checksum
Optional.
Disabled by default.
10. Configure the key for the GRE
tunnel interface.
gre key key-number
Optional.
By default, no key is configured for
a GRE tunnel interface.
The two ends of a tunnel must have
the same key or have no key at the
same time.
11. Specify a value for the
Recursion Control field in the
GRE header.
gre recursion recursion-value
Optional.
By default, the value of the
Recursion Control field in the GRE
header is 0, which means not to
limit the number of encapsulations.
12. Return to system view.
quit N/A
13. Configure the device to
discard the IPv4-compatible
IPv6 packets.
tunnel discard
ipv4-compatible-packet
Optional.
By default, the device does not
discard the IPv4-compatible IPv6
packets.
14. Configure a route for packet
forwarding through the
tunnel.
For more information about routing
configuration, see Network
Management Configuration
Guide.
Each end of the tunnel must have a
route (static or dynamic) through
the tunnel to the other end.
For information about tunnel interfaces and related configurations, see "Configuring tunneling."