HP VPN Firewall Appliances VPN Configuration Guide

82
Ste
p
Command Remarks
5. Specify the ISATAP tunnel mode.
tunnel-protocol ipv6-ipv4 isatap
The default tunnel mode is GRE
over IPv4 mode. The same
tunnel mode should be
configured at both ends of the
tunnel. Otherwise, packet
delivery fails.
6. Configure a source address or
interface for the tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address
or interface is configured for the
tunnel.
7. Return to system view.
quit N/A
8. Enable dropping of IPv6 packets
using IPv4-compatible IPv6
addresses.
tunnel discard
ipv4-compatible-packet
Optional.
Disabled by default.
Configuration example
Network requirements
As shown in Figure 68, configure an ISATAP tunnel between the firewall and the ISATAP host so the
ISATAP host in the IPv4 network can access the IPv6 network.
Figure 68 Network diagram
Configuration procedure
Make sure GigabitEthernet 0/1 on the ISATAP firewall and the ISATAP host can reach each other through
IPv4.
• Configure the firewall:
# Enable IPv6.
<Firewall> system-view
[Firewall] ipv6
# Configure addresses for interfaces.
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] ipv6 address 3001::1/64
[Firewall-GigabitEthernet0/2] quit
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] ip address 1.1.1.1 255.0.0.0
[Firewall-GigabitEthernet0/1] quit
# Configure an ISATAP tunnel.
[Firewall] interface tunnel 0