HP VPN Firewall Appliances VPN Configuration Guide

392

AFT configuration examples

An IPv6 host with an IVI address initiates communication with

an IPv4 host

Network requirements

As shown in Figure 304, Host A is in an IPv6 network and has an address of 6:0:ff06:606:200::, and

Host C is in an IPv4 network and has an address of 4.4.4.2. Host A wishes to communicate with Host

Figure 304 An IPv6 host with an IVI address initiates communication with an IPv4 host

Configuration consideration

The IPv6 address of Host A is an IVI address. For Host A to communicate with Host B, enable AFT, and

configure DNS64 and IVI prefixes on Firewall.

Configuration procedure

1. Configure Firewall (the AFT):

# Enable IPv6.

<Firewall> system-view

[Firewall] ipv6

# Configure IP addresses for the interfaces GigabitEthernet 0/1 and GigabitEthernet 0/2 and

enable AFT on the interfaces.

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] ipv6 address 6:0:ff06:606:100::/64

[Firewall-GigabitEthernet0/1] aft enable

[Firewall-GigabitEthernet0/1] quit

[Firewall] interface gigabitethernet 0/2

[Firewall-GigabitEthernet0/2] ip address 4.4.4.1 24

[Firewall-GigabitEthernet0/2] aft enable

[Firewall-GigabitEthernet0/2] quit

# Configure the DNS64 prefix.

[Firewall] aft prefix-dns64 2000:: 32

# Configure the IVI prefix.

[Firewall] aft prefix-ivi 6::

2. Configure Host A:

Perform the following configurations on Host A. (Details not shown.)

{ Configure IPv6 address 6:0:ff06:606:200::/64.