HP VPN Firewall Appliances VPN Configuration Guide

69
Configuration procedure
To configure an IPv6 manual tunnel:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable IPv6.
ipv6
By default, the IPv6 packet
forwarding function is disabled.
3. Enter tunnel interface view.
interface tunnel number N/A
4. Configure an IPv6 address
for the tunnel interface.
• Configure a global unicast IPv6
address or a site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length
eui-64
• Configure a link-local IPv6 address:
{ ipv6 address auto link-local
{ ipv6 address ipv6-address
link-local
The link-local IPv6 address
configuration is optional.
By default:
• No IPv6 global unicast
address or site-local address
is configured for the tunnel
interface.
• A link-local address is
automatically created when
an IPv6 global unicast
address or site-local address
is configured.
5. Specify the IPv6 manual
tunnel mode.
tunnel-protocol ipv6-ipv4
The default tunnel mode is GRE
over IPv4 mode. The same tunnel
mode should be configured at
both ends of the tunnel.
Otherwise, packet delivery fails.
6. Configure a source
address or interface for the
tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or
interface is configured for the
tunnel.
7. Configure a destination
address for the tunnel
interface.
destination ip-address
By default, no destination
address is configured for the
tunnel.
8. Return to system view.
quit N/A
9. Enable dropping of IPv6
packets using
IPv4-compatible IPv6
addresses.
tunnel discard ipv4-compatible-packet
Optional.
This feature is disabled by
default.
Configuration example
Network requirements
As shown in Figure 64, configure an IPv4 network between Firewall A and Firewall B so the two IPv6
networks can reach each other over the IPv4 network. The tunnel destination IPv4 address cannot be
automatically obtained from the destination IPv6 addresses of packets. Therefore, configure an IPv6
manual tunnel.