beautypg.com

Configuring a static mapping on the ipv4 side – H3C Technologies H3C SecPath F1000-E User Manual

Page 192

background image

7

To do…

Use the command…

Remarks

Associate an IPv6 ACL with an address
pool:
If the source IPv6 address of an IPv6

packet matches the specified IPv6 ACL, the
source IPv6 address will be translated into

an IPv4 address of the specified address

pool.

natpt v6bound dynamic
acl6
number acl-number
address-group address-group
[ no-pat ]

Associate an IPv6 ACL with an interface
address:
If the source IPv6 address of an IPv6
packet matches the specified IPv6 ACL, the

source IPv6 address will be translated into

the IPv4 address of the specified interface.

natpt v6bound dynamic
acl6
number acl-number
interface interface-type

interface-number

Associate a NAT-PT prefix with an address
pool:
If the destination IPv6 address of an IPv6

packet matches the specified NAT-PT
prefix, the source IPv6 address will be

translated into an IPv4 address of the

specified address pool.

natpt v6bound dynamic
prefix
natpt-prefix
address-group address-group
[ no-pat ]

Associate a NAT-PT prefix with an
interface address:
If the destination IPv6 address of an IPv6

packet matches the specified NAT-PT

prefix, the source IPv6 address will be
translated into the IPv4 address of the

specified interface.

natpt v6bound dynamic
prefix
natpt-prefix interface

interface-type interface-number

Configure any of the four
types of dynamic mappings.

NOTE:

The NAT-PT prefix referenced in a natpt v6bound dynamic command must have been configured with
the natpt prefix command.

If the no-pat keyword is specified, dynamic mappings are used for NAT-PT. If this keyword is not
specified, the NAPT-PT mechanism is used to translate between IPv4 addresses and IPv6 addresses, and

the end IPv4 address in the address pool is used for NAPT-PT.

For the ACL configuration, see ACL configuration in the Firewall Web Configuration Manual.

Configuring IPv4/IPv6 Address Mappings on the IPv4 Side

IPv4/IPv6 address mappings on the IPv4 side can be static or dynamic.

Configuring a static mapping on the IPv4 side

A static IPv4/IPv6 address mapping on the IPv4 side shows the one-to-one correspondence between an

IPv4 address and an IPv6 address.

If the source IPv4 address in a packet sent from an IPv4 host to an IPv6 host matches a static
IPv4/IPv6 address mapping, the source IPv4 address is translated into the corresponding IPv6

address.