HP VPN Firewall Appliances VPN Configuration Guide
ii
Configuration prerequisites ·································································································································· 67
Configuration guidelines ······································································································································ 67
Configuration procedure ······································································································································ 67
Configuring an IPv6 manual tunnel ······························································································································ 68
Configuration prerequisites ·································································································································· 68
Configuration guidelines ······································································································································ 68
Configuration procedure ······································································································································ 69
Configuration example ········································································································································· 69
Configuring an automatic IPv4-compatible IPv6 tunnel ····························································································· 72
Configuration prerequisites ·································································································································· 72
Configuration guidelines ······································································································································ 72
Configuration procedure ······································································································································ 72
Configuration example ········································································································································· 73
Configuring a 6to4 tunnel ············································································································································· 75
Configuration prerequisites ·································································································································· 75
Configuration guidelines ······································································································································ 75
Configuration procedure ······································································································································ 76
6to4 tunnel configuration example ····················································································································· 77
6to4 relay configuration example ······················································································································· 79
Configuring an ISATAP tunnel ······································································································································ 81
Configuration prerequisites ·································································································································· 81
Configuration guidelines ······································································································································ 81
Configuration procedure ······································································································································ 81
Configuration example ········································································································································· 82
Configuring an IPv4 over IPv4 tunnel ·························································································································· 84
Configuration prerequisites ·································································································································· 84
Configuration guidelines ······································································································································ 84
Configuration procedure ······································································································································ 85
Configuration example ········································································································································· 85
Configuring an IPv4 over IPv6 manual tunnel ············································································································· 88
Configuration prerequisites ·································································································································· 88
Configuration guidelines ······································································································································ 88
Configuration procedure ······································································································································ 88
Configuration example ········································································································································· 89
Configuring a DS-Lite tunnel ········································································································································· 92
Configuration prerequisites ·································································································································· 92
Configuring the CPE of a tunnel ·························································································································· 92
Configuring the AFTR of a tunnel························································································································· 93
Configuration example ········································································································································· 94
Configuring an IPv6 over IPv6 tunnel ·························································································································· 97
Configuration prerequisites ·································································································································· 97
Configuration guidelines ······································································································································ 97
Configuration procedure ······································································································································ 98
Configuration example ········································································································································· 99
Displaying and maintaining tunneling configuration ······························································································· 102
Troubleshooting tunneling configuration ··················································································································· 102
Symptom ······························································································································································· 102
Solution ································································································································································· 102
Configuring IKE ······················································································································································· 103
Overview ······································································································································································· 103
IKE security mechanism ······································································································································· 103
IKE operation ······················································································································································· 103
IKE functions ························································································································································· 104
Relationship between IKE and IPsec ·················································································································· 105