HP VPN Firewall Appliances VPN Configuration Guide

[FirewallA-Tunnel1] ip address 30.1.2.1 255.255.255.0

# Configure the tunnel encapsulation mode as IPv4 over IPv6.

[FirewallA-Tunnel1] tunnel-protocol ipv4-ipv6

# Specify the IP address of GigabitEthernet 0/2 as the source address for interface Tunnel 1.

[FirewallA-Tunnel1] source 2002::1:1

# Specify the IP address of GigabitEthernet 0/2 on Firewall B as the destination address for

interface Tunnel 1.

[FirewallA-Tunnel1] destination 2002::2:1

[FirewallA-Tunnel1] quit

# Configure a static route from Firewall A through interface Tunnel 1 to Group 2.

[FirewallA] ip route-static 30.1.3.0 255.255.255.0 tunnel 1

• Configure Firewall B:

# Enable IPv6.

<FirewallB> system-view

[FirewallB] ipv6

# Configure an IPv4 address for GigabitEthernet 0/1.

[FirewallB] interface gigabitethernet 0/1

[FirewallB-GigabitEthernet0/1] ip address 30.1.3.1 255.255.255.0

[FirewallB-GigabitEthernet0/1] quit

# Configure an IPv6 address for GigabitEthernet 0/2, which is the physical interface of the tunnel.

[FirewallB] interface gigabitethernet 0/2

[FirewallB-GigabitEthernet0/2] ipv6 address 2002::2:1 64

[FirewallB-GigabitEthernet0/2] quit

# Create interface Tunnel 2.

[FirewallB] interface tunnel 2

# Configure an IPv4 address for interface Tunnel 2.

[FirewallB-Tunnel2] ip address 30.1.2.2 255.255.255.0

# Configure the tunnel encapsulation mode as IPv4 over IPv6.

[FirewallB-Tunnel2] tunnel-protocol ipv4-ipv6

# Specify the IP address of GigabitEthernet 0/2 as the source address for interface Tunnel 2.

[FirewallB-Tunnel2] source 2002::2:1

# Specify the IP address of GigabitEthernet 0/2 on Firewall A as the destination address for

interface Tunnel 2.

[FirewallB-Tunnel2] destination 2002::1:1

[FirewallB-Tunnel2] quit

# Configure a static route from Firewall B through interface Tunnel 2 to Group 1.

[FirewallB] ip route-static 30.1.1.0 255.255.255.0 tunnel 2

Verifying the configuration

# Display the status of the tunnel interfaces on Firewall A and Firewall B.

[FirewallA] display interface tunnel 1

Tunnel1 current state: UP

Line protocol current state: UP

Description: Tunnel1 Interface

The Maximum Transmit Unit is 64000

Internet Address is 30.1.2.1/24 Primary