HP VPN Firewall Appliances VPN Configuration Guide

398
Pro: UDP(17) App: DNS State: UDP-READY
Start time: 2010-12-21 17:00:06 TTL: 52s
Root Zone(in):
Zone(out): Management
Received packet(s)(Init): 1 packet(s) 77 byte(s)
Received packet(s)(Reply): 2 packet(s) 183 byte(s)
Initiator:
Source IP/Port : 0006::0002/32768
Dest IP/Port : 2000:0:0404:0402::/44012
VPN-Instance/VLAN ID/VLL ID:
Responder:
Source IP/Port : 4.4.4.2/0
Dest IP/Port : 6.6.6.10/12299
VPN-Instance/VLAN ID/VLL ID:
Pro: ICMPv6(58) App: unknown State: ICMP-CLOSED
Start time: 2010-12-21 17:00:06 TTL: 23s
Root Zone(in): Management
Zone(out): Management
Received packet(s)(Init): 5 packet(s) 520 byte(s)
Received packet(s)(Reply): 5 packet(s) 420 byte(s)
Total find: 2
Troubleshooting AFT
Symptom 1
When an IPv6 host with a non-IVI address initiates communication with an IPv4 host, AFT fails to perform
address translation.
Solution
1. Enable debugging for AFT and locate the causes based on the debugging information.
2. Verify that the translation of the source address is successful based on the debugging information.
If not, the address pool might run out of IP addresses.
3. You can configure a larger address pool or use IP address + port number translation to save the IP
addresses in the address pool.
Symptom 2
When an IPv6 host with an IVI address initiates communication with an IPv4 host, AFT fails to perform
address translation.