Configuration procedure, Network requirements – H3C Technologies H3C SecPath F1000-E User Manual
Page 753
728
Figure 373 Network diagram
Configuration procedure
# Configure a mapping between host name host.com and IPv6 address 1::2.
[SecPath] ipv6 host host.com 1::2
# Enable IPv6 packet forwarding.
[SecPath] ipv6
# Use the ping ipv6 host.com command to verify that the SecPath can use static domain name resolution
to resolve domain name host.com into IPv6 address 1::2.
[SecPath] ping ipv6 host.com
PING host.com (1::2):
56 data bytes, press CTRL_C to break
Reply from 1::2
bytes=56 Sequence=1 hop limit=128 time = 3 ms
Reply from 1::2
bytes=56 Sequence=2 hop limit=128 time = 1 ms
Reply from 1::2
bytes=56 Sequence=3 hop limit=128 time = 1 ms
Reply from 1::2
bytes=56 Sequence=4 hop limit=128 time = 2 ms
Reply from 1::2
bytes=56 Sequence=5 hop limit=128 time = 2 ms
--- host.com ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/3 ms
Dynamic domain name resolution configuration example
Network requirements
As shown in
, the SecPath wants to access the host by using an easy-to-remember domain
name rather than an IPv6 address. The IPv6 address of the DNS server is 2::2/64 and the server has a
com domain, which stores the mapping between domain name host and IPv6 address 1::1/64.
Configure dynamic domain name resolution and the domain name suffix com on the SecPath that serves
as a DNS client so that the SecPath can use domain name host to access the host with the domain name
host.com and the IPv6 address 1::1/64.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer