Configuring a 6to4 tunnel, Configuration prerequisites, Configuration guidelines – H3C Technologies H3C SecPath F1000-E User Manual
Page 104
92
ND retransmit interval is 1000 milliseconds
Hosts use stateless autoconfig for addresses
IPv6 Packet statistics:
InReceives: 55
...
# Ping the IPv6 address of GigabitEthernet 0/1 at the peer end from Router A.
[RouterA] ping ipv6 3003::1
PING 3003::1 : 56 data bytes, press CTRL_C to break
Reply from 3003::1
bytes=56 Sequence=1 hop limit=64 time = 1 ms
Reply from 3003::1
bytes=56 Sequence=2 hop limit=64 time = 1 ms
Reply from 3003::1
bytes=56 Sequence=3 hop limit=64 time = 1 ms
Reply from 3003::1
bytes=56 Sequence=4 hop limit=64 time = 1 ms
Reply from 3003::1
bytes=56 Sequence=5 hop limit=64 time = 1 ms
--- 3003::1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/1 ms
Configuring a 6to4 tunnel
Configuration prerequisites
Configure IP addresses for interfaces (such as the VLAN interface, GigabitEthernet interface, and
loopback interface) on the firewall to ensure normal communication. One of the interfaces will be used
as the source interface of the tunnel.
Configuration guidelines
Follow these guidelines when you configure a 6to4 tunnel:
•
No destination address needs to be configured for a 6to4 tunnel because the destination address
can automatically be obtained from the IPv4 address embedded in the 6to4 IPv6 address.
•
To encapsulate and forward IPv6 packets whose destination address does not belong to the subnet
where the receiving tunnel interface resides, configure a static route to reach the destination IPv6
address through this tunnel interface on the firewall. Because automatic tunnels do not support
dynamic routing, you can configure a static route to that destination IPv6 address with this tunnel
interface as the outbound interface or the peer tunnel interface address as the next hop. A similar
configuration needs to be performed at the other tunnel end. For the detailed configuration, see
Network Management Configuration Guide.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS