H3C Technologies H3C SecPath F1000-E - Manual (Page 101)

89
Step Command Remarks
4. Configure an IPv6 address
for the tunnel interface.
• Configure a global unicast IPv6
address or a site-local address:
{
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{
ipv6 address
ipv6-address/prefix-length
eui-64
• Configure a link-local IPv6
address:
{
ipv6 address auto link-local
{
ipv6 address ipv6-address
link-local
The link-local IPv6 address
configuration is optional.
By default,
• No IPv6 global unicast address
or site-local address is
configured for the tunnel
interface.
• A link-local address will
automatically be created when
an IPv6 global unicast address
or site-local address is
configured.
5. Specify the IPv6 manual
tunnel mode.
tunnel-protocol ipv6-ipv4
By default, the tunnel mode is GRE
over IPv4.
The same tunnel mode should be
configured at both ends of the
tunnel. Otherwise, packet delivery
will fail.
6. Configure a source address
or interface for the tunnel.
source { ip-address | interface-type
interface-number } By default, no source address or
interface is configured for the tunnel.
7. Configure a destination
address for the tunnel.
destination ip-address
By default, no destination address is
configured for the tunnel.
8. Return to system view. quit N/A
9. Enable dropping of IPv6
packets using
IPv4-compatible IPv6
addresses.
tunnel discard
ipv4-compatible-packet Optional.
Disabled by default.
Configuration example
NOTE:
In this configuration example, either Router A or Router B is the SecPath firewall.
Network requirements
As shown in Figure 72 , two IPv6 networks are connected over an IPv4 network. An IPv6 over IPv4 tunnel
need be configured between Router A and Router B to make the two IPv6 networks reachable to each
other. If the destination IPv4 address cannot be automatically obtained from the destination IPv6
addresses of packets, configure an IPv6 manual tunnel.