H3C Technologies H3C SecPath F1000-E - Manual (Page 118)

106
• If you specify a source interface instead of a source address for the tunnel, the source address of the
tunnel is the primary IP address of the source interface.
Configuration procedure
To configure an IPv4 over IPv6 manual tunnel:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable IPv6. ipv6
By default, the IPv6 packet forwarding
function is disabled.
3. Enter tunnel interface view. interface tunnel number N/A
4. Configure an IPv4 address
for the tunnel interface.
ip address ip-address { mask
| mask-length } [ sub ] By default, no IPv4 address is configured
for the tunnel interface.
5. Specify the IPv4 over IPv6
manual tunnel mode.
tunnel-protocol ipv4-ipv6
Optional.
By default, the tunnel mode is GRE over
IPv4.
The same tunnel mode should be
configured at both ends of the tunnel.
Otherwise, packet delivery will fail.
6. Configure the source
address or interface for the
tunnel interface.
source { ipv6-address |
interface-type
interface-number }
By default, no source address or interface
is configured for the tunnel.
7. Configure the destination
address for the tunnel
interface. destination ipv6-address
By default, no destination address is
configured for the tunnel.
Configuration example
NOTE:
In this configuration example, either Router A or Router B is the SecPath firewall.
Network requirements
As shown in Figure 77 , the two IPv4 subnets Group 1 and Group 2 are connected over an IPv6 network.
Configure an IPv4 over IPv6 manual tunnel between Router A and Router B to make the two subnets
reachable to each other.