
Configuring an IPv6 Tunnel
created in Step 1, or its routable NAT address.
Hurricane Electric will set up the tunnel and provide you with the following information:
l The IPv4 and IPv6 addresses for the Hurricane Electric tunnel endpoint.
l The IPv6 address of the default route for the tunnel.
l The IPv6 address block assigned by Hurricane Electric (a /64 prefix subnet).
l The IP addresses of Hurricane Electric's IPv6 and IPv4 DNS servers. (See the section, "Configuring DNS
for IPv6 Tunnels" on page 227 for how to configure DNS for your tunnel.)
3. Create the tunnel on Equalizer using the information from the previous step. [For illustration, we use the
multi-line command format below; the tunnel command can also be entered on a single line.] Enter:
eqcli> tunnel HE1
eqcli tl-HE1> type ipip
eqcli tl-HE1> local_endpoint ipv4_addr
eqcli tl-HE1> remote_endpoint ipv4_addr
eqcli tl-HE1> local_address ipv6_addr
eqcli tl-HE1> remote_address ipv6_addr
eqcli tl-HE1> commit
The parameter arguments are as follows:
l type - Currently, ipip is the only permitted tunnel type.
l local_endpoint - The IPv4 address provided to the tunnel broker as the Equalizer endpoint for the tunnel. It
is the IP address that the tunnel broker will use to reach Equalizer. This is either Equalizer’s VLAN IP on the
subnet created in Step 1 or the IP address with which Equalizer’s VLAN IP is associated via Network
Address Translation (NAT).
l remote_endpoint - The IPv4 address of the tunnel broker side of the tunnel as provided by the tunnel
broker.
l local_address - The IPv6 address of the Equalizer side of the tunnel; this is assigned by the user and must
be within the address range provided by the tunnel broker.
l remote_address - The IPv6 address of the tunnel broker side of the tunnel as provided by the tunnel
broker.
4. If it does not already exist, configure the VLAN presence on the Equalizer for this tunnel:
eqcli> vlan vlan_name vid VLAN_ID flags tunnel
eqcli> vlan vlan_name subnet subnet_name ip local_address default_route ipv6_addr
Note the following:
226
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Comentários a estes Manuais