H3C Technologies H3C SecPath F1000-E - Manual (Page 44)

37
Step Command
1. Enter system view. system-view
2. Configure a static IPv4/IPv6 address mapping on the
IPv6 side.
natpt v6bound static ipv6-address ipv4-address
Configuring a dynamic mapping policy on the IPv6 side
A dynamic IPv4/IPv6 mapping policy on the IPv6 side is that if the source IPv6 address matches a
specified IPv6 ACL or the destination IPv6 address is the same as the specified NAT-PT prefix, the source
IPv6 address will be translated into an IPv4 address in a specified NAT-PT address pool or the IPv4
address of a specified interface.
The firewall provides the following dynamic mapping policies:
• Policy 1—Associate an IPv6 ACL with an address pool.
If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6 address will
be translated into an IPv4 address in the specified address pool.
• Policy 2—Associate an IPv6 ACL with an interface address.
If the source IPv6 address of a packet matches the specified IPv6 ACL, the source IPv6 address will
be translated into the IPv4 address of the specified interface.
• Policy 3—Associate a NAT-PT prefix with an address pool.
If the destination IPv6 address of a packet matches the NAT-PT prefix, the source IPv6 address will
be translated into an IPv4 address in the specified address pool.
• Policy 4—Associate a NAT-PT prefix with an interface address.
If the destination IPv6 address of a packet matches the NAT-PT prefix, the source IPv6 address will
be translated into the IPv4 address of the specified interface.
To use policy 1 or 3, you must configure a NAT-PT address pool first.
A NAT-PT address pool is a group of contiguous IPv4 addresses and is used to translate an IPv6 address
into an IPv4 address dynamically. When an IPv6 packet is sent from an IPv6 network to an IPv4 network,
if policy 1 or 3 is set, the NAT-PT device will select an IPv4 address from the NAT-PT address pool as the
source IPv4 address of the IPv6 packet.
To configure a dynamic IPv4/IPv6 address mapping policy on the IPv6 side:
Step Command Remarks
1. Enter system view. system-view N/A
2. Configure a NAT-PT
address pool.
natpt address-group group-number
start-ipv4-address end-ipv4-address
Required for the first type
and third type in which the
source IPv6 address is
translated into an IPv4
address in the specified
address pool.
This configuration is not
needed in the second type
and fourth type.