Configuring an ipv6 over ipv6 tunnel, Configuration prerequisites, Configuration guidelines – H3C Technologies H3C SecPath F1000-E User Manual
Page 127: Configuration procedure
115
Reply from 20.1.1.2: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 20.1.1.2: bytes=56 Sequence=5 ttl=255 time=1 ms
--- 20.1.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/1 ms
Configuring an IPv6 over IPv6 tunnel
Configuration prerequisites
Configure IP addresses for interfaces (such as the VLAN interface, GigabitEthernet interface, and
loopback interface) on the firewall to ensure normal communication. One of the interfaces will be used
as the source interface of the tunnel.
Configuration guidelines
Follow these guidelines when you configure an IPv6 over IPv6 tunnel:
•
To encapsulate and forward IPv6 packets whose destination address does not belong to the subnet
where the receiving tunnel interface resides, configure a static route or dynamic routing for
forwarding those packets through this tunnel interface. If you configure a static route to that
destination IPv6 address, specify this tunnel interface as the outbound interface, or the peer tunnel
interface address as the next hop. A similar configuration needs to be performed at the other tunnel
end. If you configure dynamic routing at both ends, enable the dynamic routing protocol on both
tunnel interfaces. For the detailed configuration, see Network Management Configuration Guide.
•
The IPv6 address of a tunnel interface must not be on the same subnet as the destination address of
the tunnel.
•
The destination address of a route with the tunnel interface as the egress interface must not be on
the same subnet as the destination address of the tunnel.
•
Two or more tunnel interfaces using the same encapsulation protocol must have different source and
destination addresses.
•
If you specify a source interface instead of a source address for the tunnel, the source address of the
tunnel is the primary IP address of the source interface.
•
Only the IPv6 over IPv6 tunnel has a maximum number of nested encapsulations for a packet.
Configuration procedure
To configure an IPv6 over IPv6 tunnel:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable IPv6.
ipv6
By default, the IPv6 packet forwarding
function is disabled.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS