Method used to configure 6to4 tunnels on the USG6000 series

7

On the USG6000 series, configure the 6RD tunnel as follows:
NGFW_A and NGFW_B are 6to4 routers connected to boundary devices of the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_B to the IPv4 network is 1.1.1.2/24. A 6to4 tunnel is established between NGFW_A and NGFW_B.

1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_A.
system-view
[NGFW] sysname NGFW_A
[NGFW_A] ipv6
[NGFW_A] interface tunnel 1
[NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 6to4
[NGFW_A-Tunnel1] ipv6 enable
[NGFW_A-Tunnel1] source 1.1.1.1
[NGFW_B-Tunnel1] ipv6 address 2002:0101:101::1 48

2. Configure the route connecting NGFW_B to the IPv6 network.
[NGFW_A] ipv6 route-static 2002:: 16 tunnel 1

3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_B.
system-view
[NGFW] sysname NGFW_B
[NGFW_B] ipv6
[NGFW_B] interface tunnel 1
[NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4 6to4
[NGFW_B-Tunnel1] ipv6 enable
[NGFW_B-Tunnel1] source 1.1.1.2
[NGFW_B-Tunnel1] ipv6 address 2002:0101:102::2 48

4. Configure the route connecting NGFW_A to the IPv6 network.
[NGFW_B] ipv6 route-static 2002:: 16 tunnel 1

Other related questions:
Method used to configure 6to4 tunnels on the USG2000 and USG5000 series
On the USG2000 series, configure the 6RD tunnel as follows: USG_A and USG_B are 6to4 routers connected to boundary devices of the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting USG_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of interface GigabitEthernet 1/0/1 connecting USG_B to the IPv4 network is 1.1.1.2/24. A 6to4 tunnel is established between USG_A and USG_B. 1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of USG_A. system-view [USG] sysname USG_A [USG_A] ipv6 [USG_A] interface tunnel 1 [USG_A-Tunnel1] tunnel-protocol ipv6-ipv4 6to4 [USG_A-Tunnel1] ipv6 enable [USG_A-Tunnel1] source 1.1.1.1 [USG_B-Tunnel1] ipv6 address 2002:0101:101::1 48 2. Configure the route connecting USG_B to the IPv6 network. [USG_A] ipv6 route-static 2002:: 16 tunnel 1 3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of USG_B. system-view [USG] sysname NGFW_B [USG_B] ipv6 [USG_B] interface tunnel 1 [USG_B-Tunnel1] tunnel-protocol ipv6-ipv4 6to4 [USG_B-Tunnel1] ipv6 enable [USG_B-Tunnel1] source 1.1.1.2 [USG_B-Tunnel1] ipv6 address 2002:0101:102::2 48 4. Configure the route connecting USG_A to the IPv6 network. [USG_B] ipv6 route-static 2002:: 16 tunnel 1

Method used to configure 6RD tunnels on the USG6000 series
On the USG6000 series, configure the 6RD tunnel as follows: 1. Configure the 6RD tunnel type, source address, length of the 6RD prefix and IPv4 prefix, and IPv4 address of the 6RD BR on NGFW_A. system-view [NGFW] sysname NGFW_A [NGFW_A] ipv6 [NGFW_A] interface tunnel 1 [NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 6rd [NGFW_A-Tunnel1] ipv6 enable [NGFW_A-Tunnel1] source 1.1.1.1 [NGFW_A-Tunnel1] ipv6-prefix 22::/32 [NGFW_A-Tunnel1] ipv4-prefix length 8 [NGFW_A-Tunnel1] border-relay address 1.1.1.2 2. Display the value of 6RD delegation prefix obtained after calculation. [NGFW_A-Tunnel1] display this # interface Tunnel1 tunnel-protocol ipv6-ipv4 6rd source 1.1.1.1 ipv6-prefix 22::/32 ipv4-prefix length 8 border-relay address 1.1.1.2 6rd-delegate-prefix 22:0:101:100::/56 # return 3. Configure the IPv6 address for the tunnel interface based on the 6RD delegation prefix, source address of the tunnel, and length of the IPv4 prefix. [NGFW_A-Tunnel1] ipv6 address 22:0:101:100::1 56# Configure a static route for connecting NGFW_B to the IPv6 network. (Assume that the interface address is 3001::1/64.) [NGFW_A] ipv6 route-static 22:: 32 Tunnel 1 [NGFW_A] ipv6 route-static 3001:: 64 22:0:101:200::1 4. Configure the 6RD tunnel type, source address, and length of the 6RD prefix and IPv4 prefix for NGFW_B. system-view [NGFW] sysname NGFW_B [NGFW_B] ipv6 [NGFW_B] interface tunnel 1 [NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4 6rd [NGFW_B-Tunnel1] ipv6 enable [NGFW_B-Tunnel1] source 1.1.1.2 [NGFW_B-Tunnel1] ipv6-prefix 22::/32 [NGFW_B-Tunnel1] ipv4-prefix length 8 5. Display the value of 6RD delegation prefix obtained after calculation. [NGFW_B-Tunnel1] display this # interface Tunnel1 tunnel-protocol ipv6-ipv4 6rd source GigabitEthernet 1/0/1 ipv6-prefix 22::/32 ipv4-prefix length 8 6rd-delegate-prefix 22:0:101:200::/56 # return 6. Configure the IPv6 address for the tunnel interface based on the 6RD delegation prefix, source address of the tunnel, and length of the IPv4 prefix. [NGFW_B-Tunnel1] ipv6 address 22:0:101:200::1 56# Configure a route for connecting NGFW_A to the IPv6 network. [NGFW_B] ipv6 route-static 22:: 32 tunnel 1

Method used to configure ISATAP tunnels on the USG6000 series
On the USG6000 series, configure the ISATAP tunnel as follows: NGFW_A is a boundary device on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of the host PC is 1.1.1.2/24. An ISATAP tunnel is established between NGFW_A and the PC. 1. Configure the tunnel encapsulation type, source address, and ISATAP address prefix of the tunnel interface of NGFW_A. system-view [NGFW] sysname NGFW_A [NGFW_A] ipv6 [NGFW_A] interface tunnel 1 [NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 isatap [NGFW_A-Tunnel1] ipv6 enable [NGFW_A-Tunnel1] source 1.1.1.1 [NGFW_A-Tunnel1] ipv6 address 3001:: 64 eui-64 [NGFW_A-Tunnel1] undo ipv6 nd ra halt 2. Assume that the host PC adopts the Microsoft Windows XP Professional system. The IPv4 address configured for the host is 1.1.1.2/24. Install the IPv6 protocol on the PC, so that the PC can obtain ISATAP address prefix 3001::/64 from NGFW_A.

Method used to configure IPv6 over IPv4 manual tunnels on the USG6000 series
On the USG6000 series, configure the IPv6 over IPv4 manual tunnel as follows: NGFW_A and NGFW_B are boundary devices on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24, and the IPv6 address of the interface connecting NGFW_A to the IPv6 network is 2011::1/64. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_B to the IPv4 network is 1.1.1.2/24, and the IPv6 address of the interface connecting NGFW_B to the IPv6 network is 3011::1/64. An IPv6 over IPv4 manual tunnel is established between NGFW_A and NGFW_B. 1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_A. system-view [NGFW] sysname NGFW_A [NGFW_A] ipv6 [NGFW_A] interface tunnel 1 [NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 [NGFW_A-Tunnel1] ipv6 enable [NGFW_A-Tunnel1] source 1.1.1.1 [NGFW_A-Tunnel1] destination 1.1.1.2 [NGFW_B-Tunnel1] ipv6 address 3001::1 64 2. Configure the route connecting NGFW_B to the IPv6 network. [NGFW_A] ipv6 route-static 3011:: 64 tunnel 1 3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_B. system-view [NGFW] sysname NGFW_B [NGFW_B] ipv6 [NGFW_B] interface tunnel 1 [NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4 [NGFW_B-Tunnel1] ipv6 enable [NGFW_B-Tunnel1] source 1.1.1.2 [NGFW_B-Tunnel1] destination 1.1.1.1 [NGFW_B-Tunnel1] ipv6 address 3001::2 64 4. Configure the route connecting NGFW_A to the IPv6 network. [NGFW_B] ipv6 route-static 2011:: 64 tunnel 1

Differences between a 6RD tunnel and a 6to4 tunnel
The 6RD tunneling is an improvement of the original 6to4 solution. The difference is as follows: The address defined by the 6to4 uses well-known prefix 2002::/16, while the 6RD address prefix can be obtained from the IPv6 address space allocated by carriers. Different carriers can use different prefixes to deploy 6RD tunnels. In this way, network planning becomes flexible. The 6RD tunneling is the most widely used IPv6 over IPv4 tunneling technology.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top