H3C Technologies H3C SecPath F1000-E User Manual
Page 112
100
[SecPath] interface GigabitEthernet 0/1
[SecPath-GigabitEthernet0/1] ip address 1.1.1.1 255.0.0.0
[SecPath-GigabitEthernet0/1] quit
# Configure an ISATAP tunnel.
[SecPath] interface tunnel 0
[SecPath-Tunnel0] ipv6 address 2001::5efe:0101:0101 64
[SecPath-Tunnel0] source GigabitEthernet 0/1
[SecPath-Tunnel0] tunnel-protocol ipv6-ipv4 isatap
# Disable the RA suppression so that hosts can acquire information such as the address prefix from
the RA message released by the ISATAP router.
[SecPath-Tunnel0] undo ipv6 nd ra halt
[SecPath-Tunnel0] quit
# Configure a static route to the ISATAP host.
[SecPath] ipv6 route-static 2001:: 16 tunnel 0
•
Configure the ISATAP host:
The specific configuration on the ISATAP host is related to its operating system. The following
example shows the configuration of the host running the Windows XP.
# Install IPv6.
C:\>ipv6 install
# On a Windows XP-based host, the ISATAP interface is usually interface 2. Configure the IPv4
address of the ISATAP router on interface 2 to complete the configuration on the host. Before that,
display information on the ISATAP interface:
C:\>ipv6 if 2
Interface 2: Automatic Tunneling Pseudo-Interface
Guid {48FCE3FC-EC30-E50E-F1A7-71172AEEE3AE}
does not use Neighbor Discovery
does not use Router Discovery
routing preference 1
EUI-64 embedded IPv4 address: 0.0.0.0
router link-layer address: 0.0.0.0
preferred link-local fe80::5efe:2.1.1.2, life infinite
link MTU 1280 (true link MTU 65515)
current hop limit 128
reachable time 42500ms (base 30000ms)
retransmission interval 1000ms
DAD transmits 0
default site prefix length 48
# A link-local address (fe80::5efe:2.1.1.2) in the ISATAP format was automatically generated for
the ISATAP interface. Configure the IPv4 address of the ISATAP router on the ISATAP interface.
C:\>ipv6 rlu 2 1.1.1.1
After executing the above command, display the information on the ISATAP interface.
C:\>ipv6 if 2
Interface 2: Automatic Tunneling Pseudo-Interface
Guid {48FCE3FC-EC30-E50E-F1A7-71172AEEE3AE}
does not use Neighbor Discovery
uses Router Discovery
routing preference 1
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS