HP VPN Firewall Appliances VPN Configuration Guide

Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=255 time=2 ms

--- 10.1.1.1 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 2/2/2 ms

GRE over IPv6 tunnel configuration example

Network requirements

As shown in Figure 15, two IPv4 subnets Group 1 and Group 2 are connected to an IPv6 network. Create

a GRE over IPv6 tunnel between Firewall A and Firewall B so the two IPv4 subnets can communicate with

each other through the GRE tunnel over the IPv6 network.

Figure 15 Network diagram

Configuration procedure

Before the configuration, make sure Firewall A and Firewall B can reach each other.

1. Configure Firewall A:

<FirewallA> system-view

# Enable IPv6.

[FirewallA] ipv6

# Configure an IPv4 address for interface GigabitEthernet 0/1.

[FirewallA] interface gigabitethernet 0/1

[FirewallA-GigabitEthernet0/1] ip address 10.1.1.1 255.255.255.0

[FirewallA-GigabitEthernet0/1] quit

# Configure an IPv6 address for interface GigabitEthernet 0/2, the physical interface of the

tunnel.

[FirewallA] interface gigabitethernet 0/2

[FirewallA-GigabitEthernet0/2] ipv6 address 2002::1:1 64

[FirewallA-GigabitEthernet0/2] quit

# Create a tunnel interface named Tunnel0.

[FirewallA] interface tunnel 0

# Configure an IPv4 address for the tunnel interface Tunnel0.

[FirewallA-Tunnel0] ip address 10.1.2.1 255.255.255.0

# Configure the tunnel encapsulation mode as GRE over IPv6.

[FirewallA-Tunnel0] tunnel-protocol gre ipv6

# Configure the source address of the tunnel interface Tunnel0 as the IP address of interface

GigabitEthernet 0/2.

[FirewallA-Tunnel0] source 2002::1:1