Method used to configure ISATAP tunnels on the USG6000 series

4

On the USG6000 series, configure the ISATAP tunnel as follows:

NGFW_A is a boundary device on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of the host PC is 1.1.1.2/24. An ISATAP tunnel is established between NGFW_A and the PC.

1. Configure the tunnel encapsulation type, source address, and ISATAP address prefix of the tunnel interface of NGFW_A.
system-view
[NGFW] sysname NGFW_A
[NGFW_A] ipv6
[NGFW_A] interface tunnel 1
[NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 isatap
[NGFW_A-Tunnel1] ipv6 enable
[NGFW_A-Tunnel1] source 1.1.1.1
[NGFW_A-Tunnel1] ipv6 address 3001:: 64 eui-64
[NGFW_A-Tunnel1] undo ipv6 nd ra halt

2. Assume that the host PC adopts the Microsoft Windows XP Professional system. The IPv4 address configured for the host is 1.1.1.2/24. Install the IPv6 protocol on the PC, so that the PC can obtain ISATAP address prefix 3001::/64 from NGFW_A.

Other related questions:
Method used to configure ISATAP tunnels on the USG2000 and USG5000 series
On the USG2000 and USG5000 series, configure the ISATAP tunnel as follows: USG_A is a boundary device on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting USG_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of the host PC is 1.1.1.2/24. An ISATAP tunnel is established between USG_A and the PC. 1. Configure the tunnel encapsulation type, source address, and ISATAP address prefix of the tunnel interface of USG_A. system-view [USG] sysname USG_A [USG_A] ipv6 [USG_A] interface tunnel 1 [USG_A-Tunnel1] tunnel-protocol ipv6-ipv4 isatap [USG_A-Tunnel1] ipv6 enable [USG_A-Tunnel1] source 1.1.1.1 [USG_A-Tunnel1] ipv6 address 3001:: 64 eui-64 [USG_A-Tunnel1] undo ipv6 nd ra halt 2. Assume that the host PC adopts the Microsoft Windows XP Professional system. The IPv4 address configured for the host is 1.1.1.2/24. Install the IPv6 protocol on the PC, so that the PC can obtain ISATAP address prefix 3001::/64 from USG_A.

Method used to configure 6to4 tunnels on the USG6000 series
On the USG6000 series, configure the 6RD tunnel as follows: NGFW_A and NGFW_B are 6to4 routers connected to boundary devices of the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_B to the IPv4 network is 1.1.1.2/24. A 6to4 tunnel is established between NGFW_A and NGFW_B. 1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_A. system-view [NGFW] sysname NGFW_A [NGFW_A] ipv6 [NGFW_A] interface tunnel 1 [NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 6to4 [NGFW_A-Tunnel1] ipv6 enable [NGFW_A-Tunnel1] source 1.1.1.1 [NGFW_B-Tunnel1] ipv6 address 2002:0101:101::1 48 2. Configure the route connecting NGFW_B to the IPv6 network. [NGFW_A] ipv6 route-static 2002:: 16 tunnel 1 3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_B. system-view [NGFW] sysname NGFW_B [NGFW_B] ipv6 [NGFW_B] interface tunnel 1 [NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4 6to4 [NGFW_B-Tunnel1] ipv6 enable [NGFW_B-Tunnel1] source 1.1.1.2 [NGFW_B-Tunnel1] ipv6 address 2002:0101:102::2 48 4. Configure the route connecting NGFW_A to the IPv6 network. [NGFW_B] ipv6 route-static 2002:: 16 tunnel 1

Method used to configure 6RD tunnels on the USG6000 series
On the USG6000 series, configure the 6RD tunnel as follows: 1. Configure the 6RD tunnel type, source address, length of the 6RD prefix and IPv4 prefix, and IPv4 address of the 6RD BR on NGFW_A. system-view [NGFW] sysname NGFW_A [NGFW_A] ipv6 [NGFW_A] interface tunnel 1 [NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 6rd [NGFW_A-Tunnel1] ipv6 enable [NGFW_A-Tunnel1] source 1.1.1.1 [NGFW_A-Tunnel1] ipv6-prefix 22::/32 [NGFW_A-Tunnel1] ipv4-prefix length 8 [NGFW_A-Tunnel1] border-relay address 1.1.1.2 2. Display the value of 6RD delegation prefix obtained after calculation. [NGFW_A-Tunnel1] display this # interface Tunnel1 tunnel-protocol ipv6-ipv4 6rd source 1.1.1.1 ipv6-prefix 22::/32 ipv4-prefix length 8 border-relay address 1.1.1.2 6rd-delegate-prefix 22:0:101:100::/56 # return 3. Configure the IPv6 address for the tunnel interface based on the 6RD delegation prefix, source address of the tunnel, and length of the IPv4 prefix. [NGFW_A-Tunnel1] ipv6 address 22:0:101:100::1 56# Configure a static route for connecting NGFW_B to the IPv6 network. (Assume that the interface address is 3001::1/64.) [NGFW_A] ipv6 route-static 22:: 32 Tunnel 1 [NGFW_A] ipv6 route-static 3001:: 64 22:0:101:200::1 4. Configure the 6RD tunnel type, source address, and length of the 6RD prefix and IPv4 prefix for NGFW_B. system-view [NGFW] sysname NGFW_B [NGFW_B] ipv6 [NGFW_B] interface tunnel 1 [NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4 6rd [NGFW_B-Tunnel1] ipv6 enable [NGFW_B-Tunnel1] source 1.1.1.2 [NGFW_B-Tunnel1] ipv6-prefix 22::/32 [NGFW_B-Tunnel1] ipv4-prefix length 8 5. Display the value of 6RD delegation prefix obtained after calculation. [NGFW_B-Tunnel1] display this # interface Tunnel1 tunnel-protocol ipv6-ipv4 6rd source GigabitEthernet 1/0/1 ipv6-prefix 22::/32 ipv4-prefix length 8 6rd-delegate-prefix 22:0:101:200::/56 # return 6. Configure the IPv6 address for the tunnel interface based on the 6RD delegation prefix, source address of the tunnel, and length of the IPv4 prefix. [NGFW_B-Tunnel1] ipv6 address 22:0:101:200::1 56# Configure a route for connecting NGFW_A to the IPv6 network. [NGFW_B] ipv6 route-static 22:: 32 tunnel 1

Method used to configure IPv6 over IPv4 manual tunnels on the USG6000 series
On the USG6000 series, configure the IPv6 over IPv4 manual tunnel as follows: NGFW_A and NGFW_B are boundary devices on the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_A to the IPv4 network is 1.1.1.1/24, and the IPv6 address of the interface connecting NGFW_A to the IPv6 network is 2011::1/64. The IPv4 address of interface GigabitEthernet 1/0/1 connecting NGFW_B to the IPv4 network is 1.1.1.2/24, and the IPv6 address of the interface connecting NGFW_B to the IPv6 network is 3011::1/64. An IPv6 over IPv4 manual tunnel is established between NGFW_A and NGFW_B. 1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_A. system-view [NGFW] sysname NGFW_A [NGFW_A] ipv6 [NGFW_A] interface tunnel 1 [NGFW_A-Tunnel1] tunnel-protocol ipv6-ipv4 [NGFW_A-Tunnel1] ipv6 enable [NGFW_A-Tunnel1] source 1.1.1.1 [NGFW_A-Tunnel1] destination 1.1.1.2 [NGFW_B-Tunnel1] ipv6 address 3001::1 64 2. Configure the route connecting NGFW_B to the IPv6 network. [NGFW_A] ipv6 route-static 3011:: 64 tunnel 1 3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of NGFW_B. system-view [NGFW] sysname NGFW_B [NGFW_B] ipv6 [NGFW_B] interface tunnel 1 [NGFW_B-Tunnel1] tunnel-protocol ipv6-ipv4 [NGFW_B-Tunnel1] ipv6 enable [NGFW_B-Tunnel1] source 1.1.1.2 [NGFW_B-Tunnel1] destination 1.1.1.1 [NGFW_B-Tunnel1] ipv6 address 3001::2 64 4. Configure the route connecting NGFW_A to the IPv6 network. [NGFW_B] ipv6 route-static 2011:: 64 tunnel 1

Method used to configure 6to4 tunnels on the USG2000 and USG5000 series
On the USG2000 series, configure the 6RD tunnel as follows: USG_A and USG_B are 6to4 routers connected to boundary devices of the IPv6 and IPv4 networks. The IPv4 address of interface GigabitEthernet 1/0/1 connecting USG_A to the IPv4 network is 1.1.1.1/24. The IPv4 address of interface GigabitEthernet 1/0/1 connecting USG_B to the IPv4 network is 1.1.1.2/24. A 6to4 tunnel is established between USG_A and USG_B. 1. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of USG_A. system-view [USG] sysname USG_A [USG_A] ipv6 [USG_A] interface tunnel 1 [USG_A-Tunnel1] tunnel-protocol ipv6-ipv4 6to4 [USG_A-Tunnel1] ipv6 enable [USG_A-Tunnel1] source 1.1.1.1 [USG_B-Tunnel1] ipv6 address 2002:0101:101::1 48 2. Configure the route connecting USG_B to the IPv6 network. [USG_A] ipv6 route-static 2002:: 16 tunnel 1 3. Configure the tunnel encapsulation type, source address, destination address, and IPv6 address of the tunnel interface of USG_B. system-view [USG] sysname NGFW_B [USG_B] ipv6 [USG_B] interface tunnel 1 [USG_B-Tunnel1] tunnel-protocol ipv6-ipv4 6to4 [USG_B-Tunnel1] ipv6 enable [USG_B-Tunnel1] source 1.1.1.2 [USG_B-Tunnel1] ipv6 address 2002:0101:102::2 48 4. Configure the route connecting USG_A to the IPv6 network. [USG_B] ipv6 route-static 2002:: 16 tunnel 1

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top