Configuration guidelines, Configuration procedure, Configuring the aftr of a tunnel – H3C Technologies H3C SecPath F1000-E User Manual
Page 122
110
This section describes how to configure a DS-Lite tunnel on the CPE. For how to configure an IPv4 over
IPv6 manual tunnel on the CPE, see "
Configuring an IPv4 over IPv6 manual tunnel
Configuration guidelines
Follow these guidelines when you configure the CPE of a DS-Lite tunnel:
•
Tunnel interfaces using the same encapsulation protocol must have different source and destination
addresses.
•
To encapsulate and forward IPv4 packets whose destination address does not belong to the subnet
where the receiving tunnel interface resides, configure a static route or dynamic routing for
forwarding those packets through this tunnel interface. If you configure a static route to that
destination IPv4 address, specify this tunnel interface as the outbound interface, or the peer tunnel
interface address as the next hop. A similar configuration needs to be performed at the other tunnel
end. If you configure dynamic routing at both ends, enable the dynamic routing protocol on both
tunnel interfaces. For the detailed configuration, see Network Management Configuration Guide.
•
If you configure a DS-Lite tunnel on the CPE, you can specify the source interface but not source
address for the tunnel interface. The primary IP address of the source interface is the source address
of the tunnel. After you configure the source interface for the tunnel, the CPE automatically obtains
the address of the AFTR through DHCPv6 and uses the address as the destination address of the
tunnel.
Configuration procedure
To configure the CPE of a DS-Lite tunnel:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable IPv6.
ipv6
No enabled by default.
3.
Enter tunnel interface view. interface tunnel number N/A
4.
Configure an IPv4 address
for the tunnel interface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IPv4 address is
configured for the tunnel interface.
5.
Specify the DS-Lite-CPE
tunnel mode.
tunnel-protocol ipv4-ipv6 dslite-cpe
By default, the tunnel mode is GRE
over IPv4.
The tunnel mode at the other end of
the tunnel should be DS-Lite AFTR.
Otherwise, packet delivery will fail.
6.
Configure the source
interface for the tunnel
interface.
source interface-type
interface-number
By default, no source interface is
configured for the tunnel.
Configuring the AFTR of a tunnel
Configuration guidelines
Follow these guidelines when you configure the AFTR of a DS-Lite tunnel:
•
Tunnel interfaces using the same encapsulation protocol must have different source and destination
addresses.
•
If you configure the source interface for the tunnel, the primary IP address of the source interface is
the source address of the tunnel.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS