HP VPN Firewall Appliances VPN Configuration Guide

388
Task Remarks
Configuring an IVI prefix
Required.
Perform either one.
Configuring a 6to4 AFT policy
When communication is initiated by an IPv4 host
Task Remarks
Enabling AFT Required.
Configuring a DNS64 prefix Required.
Configuring an IVI prefix Required.
Configuring 4to6 AFT policies Required.
Configuration prerequisites
Before you configure AFT:
1. Enable IPv6 on the AFT. For more information, see Network Management Configuration Guide.
2. Configure an IPv4 or IPv6 address as required on the interface which connects to an IPv4 or IPv6
network and on which AFT is to be enabled.
Enabling AFT
Enable AFT on both the interface connected to the IPv4 network and the interface connected to the IPv6
network.
Do not configure AFT policies and NAT-PT mapping policies on the same device.
To enable AFT:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Enable AFT on the interface.
aft enable
Disabled by default.
This command enables both AFT and
NAT-PT. For more information about
NAT-PT, see "Configuring NAT-PT."
Configuring a DNS64 prefix
Follow these guidelines when you configure DNS64 prefix:
• The DNS64 prefix cannot be in the same network segment as the connected IPv6 network.