Aft configuration examples, Network requirements, Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual
Page 82
70
AFT configuration examples
An IPv6 host with an IVI address initiates communication with
an IPv4 host
Network requirements
As shown in
, SecPath A is in an IPv6 network and has an address of 6:0:ff06:606:200::, and
SecPath C is in an IPv4 network and has an address of 4.4.4.2. SecPath A wishes to communicate with
SecPath C.
The IPv6 address of SecPath A is an IVI address. For SecPath A to communicate with SecPath C, enable
AFT and configure DNS64 and IVI prefixes on SecPath B.
Figure 61 Network diagram
Configuration procedure
1.
Configure SecPath B (the AFT):
# Enable IPv6.
<SecPathB> system-view
[SecPathB] ipv6
# Configure IP addresses for the interfaces and enable AFT on the interfaces.
[SecPathB] interface GigabitEthernet 0/1
[SecPathB-GigabitEthernet0/1] ipv6 address 6:0:ff06:606:100::/64
[SecPathB-GigabitEthernet0/1] aft enable
[SecPathB-GigabitEthernet0/1] quit
[SecPathB] interface GigabitEthernet 0/2
[SecPathB-GigabitEthernet0/2] ip address 4.4.4.1 24
[SecPathB-GigabitEthernet0/2] aft enable
[SecPathB-GigabitEthernet0/2] quit
# Configure the DNS64 prefix.
[SecPathB] aft prefix-dns64 2000:: 32
# Configure the IVI prefix.
[SecPathB] aft prefix-ivi 6::
2.
Configure SecPath A:
# Enable IPv6.
<SecPathA> system-view
[SecPathA] ipv6
# Configure an IPv6 address for interface GigabitEthernet 0/1 on SecPath A.
[SecPathA] interface GigabitEthernet 0/1