H3C Technologies H3C SecPath F1000-E - Manual (Page 50)

43
[SecPathB-GigabitEthernet0/1] ip address 8.0.0.1 255.255.255.0
[SecPathB-GigabitEthernet0/1] natpt enable
[SecPathB-GigabitEthernet0/1] quit
[SecPathB] interface GigabitEthernet 0/2
[SecPathB-GigabitEthernet0/2] ipv6 address 2001::1/64
[SecPathB-GigabitEthernet0/2] natpt enable
[SecPathB-GigabitEthernet0/2] quit
# Configure a NAT-PT prefix.
[SecPathB] natpt prefix 3001::
# Configure a static IPv4/IPv6 mapping on the IPv4 side.
[SecPathB] natpt v4bound static 9.0.0.2 3001::5
# Configure a static IPv4/IPv6 mapping on the IPv6 side.
[SecPathB] natpt v6bound static 2001::2 8.0.0.5
Configuring SecPath A
# Configure a static route to subnet 9.0.0.0/24.
system-view
[SecPathA] ip route-static 9.0.0.0 24 8.0.0.1
Configuring SecPath C on the IPv6 side
# Enable IPv6.
system-view
[SecPathC] ipv6
# Configure a static route to the subnet with the NAT-PT prefix.
[SecPathC] ipv6 route-static 3001:: 16 2001::1
Verifying the configuration
After the above configurations, using the ping 9.0.0.5 command on SecPath A can receive responses,
and you can view the following NAT-PT session information on SecPath B using the display command.
[SecPathB]display session table verbose
Initiator:
Source IP/Port : 8.0.0.2/2048
Dest IP/Port : 9.0.0.5/1
VPN-Instance/VLAN ID/VLL ID:
Responder:
Source IP/Port : 2001::0002/33024
Dest IP/Port : 3001::0005/1
VPN-Instance/VLAN ID/VLL ID:
Pro: ICMP(1) App: unknown State: ICMP-CLOSED
Start time: 2011-07-20 19:08:44 TTL: 10s
Root Zone(in):
Zone(out):
Received packet(s)(Init): 5 packet(s) 420 byte(s)
Received packet(s)(Reply): 5 packet(s) 520 byte(s)
Using the ping ipv6 3001::5 command on SecPath C can receive response packets, and you can view
the following NAT-PT session information on SecPath B by using the display command.
[SecPathB]display session table verbose