Encapsulation and de-encapsulation, Ipv4 over ipv6 tunnel modes – H3C Technologies H3C SecPath F1000-E User Manual
Page 95
83
Encapsulation and de-encapsulation
Figure 68 Principle of IPv4 over IPv6 tunneling
The encapsulation and de-encapsulation processes illustrated in
are described as follows:
•
Encapsulation
a.
Upon receiving a packet from the attached IPv4 network, Device A examines the destination
address of the packet and determines the outgoing interface.
b.
If the packet is destined for the IPv4 network attached to Device B, Device A delivers the packet
to the tunnel interface pointed to Device B.
c.
The tunnel interface adds an IPv6 header to the original IPv4 packet and delivers the packet to
the IPv6 protocol stack for forwarding.
•
De-encapsulation
a.
Upon receiving a packet from the attached IPv6 network, Device B delivers the packet to the
IPv6 protocol stack to examine the protocol type encapsulated in the data portion of the
packet.
b.
If the protocol type is IPv4, the IPv6 protocol stack delivers the packet to the tunneling module.
c.
The tunneling module removes the IPv6 header and delivers the remaining IPv4 packet to the
IPv4 protocol stack for subsequent forwarding.
IPv4 over IPv6 tunnel modes
IPv4 over IPv6 tunnels fall into the following modes:
•
IPv4 over IPv6 manual tunnel
In this tunnel mode, you must manually configure the source and destination IPv6 addresses for the
tunnel. An IPv4 over IPv6 manual tunnel is a point-to-point virtual link.
•
IPv4-over-IPv6 GRE tunnel
The IPv4 over IPv6 GRE tunnel is also a point-to-point virtual link and the source and destination
IPv6 address for the tunnel are also manually configured. The difference is that, in the case of
manual tunnel, IPv4 packets are encapsulated by using the IPv6 header, whereas in the case of
GRE tunnel, IPv4 packets are encapsulated based on standard GRE protocol.
NOTE:
The encapsulation and de-encapsulation of the IPv4-over-IPv6 GRE tunnel is slightly different from
"
Encapsulation and de-encapsulation
." For more information about GRE, see "Configuring GRE"
•
DS-Lite tunnel
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS