H3C Technologies H3C SecPath F1000-E - Manual (Page 195)

10
To do… Use the command… Remarks
Display NAT-PT statistics information display natpt statistics Available in any view
Clear all NAT-PT statistics information reset natpt statistics Available in user view
NAT-PT Configuration Examples
Configuring Dynamic Mappings on the IPv6 Side
Network requirements
As shown in Figure 3 , Device C with IPv6 address 2001::2/64 on an IPv6 network wants to access
Device A with IPv4 address 8.0.0.2/24 on an IPv4 network, whereas Device A cannot actively access
Device C.
To meet the preceding requirements, you need to configure Device B that is deployed between the IPv4
network and IPv6 network as a NAT-PT device, and configure dynamic mappings on the IPv6 side on
Device B so that IPv6 hosts can access IPv4 hosts but IPv4 hosts cannot access IPv6 hosts.
Figure 3 Network diagram for NAT-PT (dynamic IPv4/IPv6 address mappings)
Device A
Device B
Device C
GE2/0
8.0.0.2/24
GE2/0
8.0.0.1/24
GE2/1
2001::1/64
GE2/0
2001::2/64
IPv4 network IPv6 network
Configuration procedure
Step1 Configure Device B (the NAT-PT device)
# Configure interface addresses and enable NAT-PT on the interfaces.
system-view
[DeviceB] ipv6
[DeviceB] interface gigabitethernet 2/0
[DeviceB-GigabitEthernet2/0] ip address 8.0.0.1 255.255.255.0
[DeviceB-GigabitEthernet2/0] natpt enable
[DeviceB-GigabitEthernet2/0] quit
[DeviceB] interface gigabitethernet 2/1
[DeviceB-GigabitEthernet2/1] ipv6 address 2001::1/64
[DeviceB-GigabitEthernet2/1] natpt enable
[DeviceB-GigabitEthernet2/1] quit
# Configure a NAT-PT prefix.
[DeviceB] natpt prefix 3001::
# Configure a NAT-PT address pool.
[DeviceB] natpt address-group 1 9.0.0.10 9.0.0.19
# Associate the prefix with the address pool for IPv6 hosts accessing IPv4 hosts.