HPE FlexNetwork MSR Series - Allowing Mutual Access between Ipv4 and Ipv6 Networks

455
State: TCP_ESTABLISHED
Application: FTP
Start time: 2014-03-13 09:07:30 TTL: 3582s
Initiator->Responder: 3 packets 184 bytes
Responder->Initiator: 2 packets 148 bytes
Total sessions found: 1
Allowing mutual access between IPv4 and IPv6 networks
Network requirements
As shown in Figure 163, a company deploys both an IPv4 network and an IPv6 network.
To allow mutual access between the IPv4 network and the IPv6 network, configure the following AFT
policies on the router:
• Assign an IVI prefix and an IPv4 subnet to the IPv6 network. Each IPv6 host uses the IPv6
addresses formed by the IVI prefix and an IPv4 address on the IPv4 subnet.
• Configure a NAT64 prefix to translate source IPv4 addresses of packets initiated by the IPv4
network to IPv6 addresses.
Figure 163 Network diagram
Configuration procedure
# Specify IP addresses for the interfaces on the router. The IPv6 addresses for IPv6 hosts are
calculated by the IVI prefix 2013::/32 and IPv4 addresses in the range of 20.1.1.0/24. (Details not
shown.)
# Configure IPv4 ACL 2000 to permits all IPv4 packets to pass through.
<Router> system-view
[Router] acl basic 2000
[Router-acl-ipv4-basic-2000] rule permit
[Router-acl-ipv4-basic-2000] quit
# Configure the router to use NAT64 prefix 2012:: 96 to translate source addresses of IPv4 packets.
The router also uses the prefix to translate destination addresses of IPv6 packets.
[Router] aft prefix-nat64 2012:: 96
# Configure the router to use IVI prefix 2013:: to translate source addresses of IPv6 packets.
[Router] aft prefix-ivi 2013::
# Configure the router to use IVI prefix 2013:: to translate destination addresses of packets permitted
by IPv4 ACL 2000.
[Router] aft v4tov6 destination acl number 2000 prefix-ivi 2013::
# Enable AFT on GigabitEthernet 2/0/1, which is connected to the IPv4 network.
[Router] interface gigabitethernet 2/0/1
[Router-GigabitEthernet2/0/1] aft enable