H3c-technologies H3C SecPath F1000-E Manual de usuario descargar pdf (Pagina 43)

Enabling NAT-PT

After NAT-PT is enabled on both the IPv4 network interface and the IPv6 network interface, the firewall

can implement translation between IPv4 and IPv6 addresses.

To enable NAT-PT:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Enter interface view.

interface interface-type interface-number N/A

3. Enable NAT-PT on the interface.

natpt enable Disabled by default

NOTE:

• The natpt enable command enables both NAT-PT and Address Family Translation (AFT). For

information about AFT, see

VPN Configuration Guide

• Do not configure NAT-PT and AFT on a same device.

Configuring a NAT-PT prefix

Ste

Command

1. Enter system view.

system-view

2. Configure a NAT-PT prefix.

natpt prefix natpt-prefix [ interface interface-type interface-number [ nexthop

ipv4-address ] ]

CAUTION:

• The NAT-PT prefix must not be the same as the IPv6 address prefix of the NAT-PT enabled interface on

the IPv6 network.

• To delete a NAT-PT prefix that has been referenced by using the natpt v4bound dynamic or natpt

v6bound dynamic command, you must cancel the referenced configuration first.

Configuring IPv4/IPv6 address mappings on the IPv6 side

IPv4/IPv6 address mappings on the IPv6 side can be static or dynamic.

Configuring a static mapping on the IPv6 side

A static mapping on the IPv6 side shows the one-to-one correspondence between an IPv4 address and

an IPv6 address.

• If the source IPv6 address in a packet sent from an IPv6 host to an IPv4 host matches the static

mapping, the source IPv6 address is translated into the corresponding IPv4 address.

• If the destination IPv4 address in a packet sent from an IPv4 host to an IPv6 host matches the static

mapping, the destination IPv4 address is translated into the corresponding IPv6 address.

To configure a static IPv4/IPv6 address mapping on the IPv6 side:

1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 67 68

Sin comentarios

H3c-technologies H3C SecPath F1000-E Manual de usuario Pagina 43