Method used to configure IPv6 over IPv4 manual tunnels on the USG6000 series

On the USG6000 series, configure the IPv6 over IPv4 manual tunnel as follows:

NGFW_A and NGFW_B are boundary devices on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24, and the IPv6 address of the interface connecting NGFW_A to the IPv6 network is 2011::1/64. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_B to the IPv4 network is 1.1.1.2/24, and the IPv6 address of the interface connecting NGFW_B to the IPv6 network is 3011::1/64. An IPv6 over IPv4 manual tunnel is established between NGFW_A and NGFW_B.

1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_A.
system-view
[NGFW] sysname NGFW_A
[NGFW_A] ipv6
[NGFW_A] interface tunnel 1
[NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4
[NGFW_A-Tunnel1] ipv6 enable
[NGFW_A-Tunnel1] source 1.1.1.1
[NGFW_A-Tunnel1] destination 1.1.1.2
[NGFW_B-Tunnel1] ipv6 address 3001::1 64

2. Configure the route connecting NGFW_B to the IPv6 network.
[NGFW_A] ipv6 route-static 3011:: 64 tunnel 1

3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_B.
system-view
[NGFW] sysname NGFW_B
[NGFW_B] ipv6
[NGFW_B] interface tunnel 1
[NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4
[NGFW_B-Tunnel1] ipv6 enable
[NGFW_B-Tunnel1] source 1.1.1.2
[NGFW_B-Tunnel1] destination 1.1.1.1
[NGFW_B-Tunnel1] ipv6 address 3001::2 64

4. Configure the route connecting NGFW_A to the IPv6 network.
[NGFW_B] ipv6 route-static 2011:: 64 tunnel 1

Scroll to top