H3C Technologies H3C SecPath F1000-E - Manual (Page 83)

71
[SecPathA-GigabitEthernet0/1] ipv6 address 6:0:ff06:606:200::/64
[SecPathA-GigabitEthernet0/1] quit
# Configure a static route to network 2000::/32 (the DNS64 prefix).
[SecPathA] ipv6 route-static 2000:: 32 6:0:ff06:606:100::
3. Configure SecPath C:
# Configure an IP address for interface GigabitEthernet 0/1.
system-view
[SecPathC] interface GigabitEthernet 0/1
[SecPathC-GigabitEthernet0/1] ip address 4.4.4.2 24
[SecPathC-GigabitEthernet0/1] quit
# Configure a static route to the IPv4 network (6.6.6.0/24) embedded in the IVI address.
[SecPathC] ip route-static 6.6.6.0 24 4.4.4.1
Verifying the configuration
Execute the ping ipv6 2000:0:404:402:: command on SecPath A. The ping operation should be
successful.
# Execute the display session table verbose command on SecPath B to display the established sessions.
[SecPathB] display session table verbose
Initiator:
Source IP/Port : 0006:0:ff06:0606:0200::/32768
Dest IP/Port : 2000:0:0404:0402::/43982
VPN-Instance/VLAN ID/VLL ID:
Responder:
Source IP/Port : 4.4.4.2/0
Dest IP/Port : 6.6.6.2/43982
VPN-Instance/VLAN ID/VLL ID:
Pro: ICMPv6(58) App: unknown State: ICMP-CLOSED
Start time: 2010-12-21 16:06:44 TTL: 14s
Root Zone(in):
Zone(out): Management
Received packet(s)(Init): 5 packet(s) 520 byte(s)
Received packet(s)(Reply): 5 packet(s) 420 byte(s)
Total find: 1
An IPv4 host initiates communication with an IPv6 host
Network requirements
As shown in Figure 62 , SecPath A is in an IPv6 network and has an address of 6:0:ff06:606:200::, and
SecPath C is in an IPv4 network and has an address of 4.4.4.2. SecPath C wishes to communicate with
SecPath A.
For SecPath C to communicate with SecPath A, enable AFT and configure DNS64 and IVI prefixes and
4to6 AFT policies on SecPath B.