HP VPN Firewall Appliances VPN Configuration Guide

73
Ste
p
Command Remarks
2. Enable the IPv6
packet forwarding
function.
ipv6
By default, the IPv6 packet forwarding
function is disabled.
3. Enter tunnel interface
view.
interface tunnel number N/A
4. Configure an IPv6
address for the
tunnel interface.
• Configure an IPv6 global unicast
address or a site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length
eui-64
• Configure an IPv6 link-local
address:
{ ipv6 address auto link-local
{ ipv6 address ipv6-address
link-local
The IPv6 link-local address configuration is
optional.
By default:
• No IPv6 global unicast address or
site-local address is configured for the
tunnel interface.
• A link-local address is automatically
generated when an IPv6 global unicast
or site-local address is configured for
the interface.
5. Specify the
automatic
IPv4-compatible IPv6
tunnel mode.
tunnel-protocol ipv6-ipv4
auto-tunnel
The default tunnel mode is GRE over IPv4
mode. The same tunnel mode should be
configured at both ends of the tunnel.
Otherwise, packet delivery fails.
6. Configure a source
address or interface
for the tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or interface
is configured for the tunnel.
Configuration example
Network requirements
As shown in Figure 65, dual-stack firewalls, Firewall A and Firewall B communicate over an IPv4 network.
Configure an automatic IPv4-compatible IPv6 tunnel between the two firewalls to enable IPv6
communications other over the IPv4 network.
Figure 65 Network diagram
Configuration procedure
Before configuring an automatic IPv4-compatible IPv6 tunnel, make sure Firewall A and Firewall B can
reach each other through IPv4.
• Configure Firewall A:
# Enable IPv6.
<FirewallA> system-view
[FirewallA] ipv6