HP VPN Firewall Appliances VPN Configuration Guide

89
Ste
p
Command Remarks
5. Specify the IPv4 over IPv6
manual tunnel mode.
tunnel-protocol ipv4-ipv6
The default tunnel mode is GRE over
IPv4 mode. The same tunnel mode
should be configured at both ends of
the tunnel. Otherwise, packet delivery
fails.
6. Configure the source
address or interface for the
tunnel interface.
source { ipv6-address |
interface-type interface-number }
By default, no source address or
interface is configured for the tunnel.
7. Configure the destination
address for the tunnel
interface.
destination ipv6-address
By default, no destination address is
configured for the tunnel.
Configuration example
Network requirements
As shown in Figure 70, configure an IPv4 over IPv6 manual tunnel between Firewall A and Firewall B so
the two IPv4 networks can reach each other over the IPv6 network.
Figure 70 Network diagram
Configuration procedure
Make sure Firewall A and Firewall B can reach each other through IPv6.
• Configure Firewall A:
# Enable IPv6.
<FirewallA> system-view
[FirewallA] ipv6
# Configure an IPv4 address for GigabitEthernet 0/1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] ip address 30.1.1.1 255.255.255.0
[FirewallA-GigabitEthernet0/1] quit
# Configure an IPv6 address for GigabitEthernet 0/2, which is the physical interface of the tunnel.
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] ipv6 address 2002::1:1 64
[FirewallA-GigabitEthernet0/2] quit
# Create interface Tunnel 1.
[FirewallA] interface tunnel 1
# Configure an IPv4 address for interface Tunnel 1.
GE0/2
2002::1:1/64
GE0/1
30.1.3.1/24
GE0/1
30.1.1.1/24
Firewall A
IPv6 network
IPv4
Group 1
Tunnel1
30.1.2.1/24
GE0/2
2002::2:1/64
Tunnel2
30.1.2.2/24
IPv4
Group 2
Firewall B
IPv4 over IPv6 tunnel