Net Mode Configuration Commands
51
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Note: To be able to configure an ISATAP tunnel, you first need to set the IP
mode to IPv4/IPv6 (see net ipv6 ipmode configure).
Command example:
SRX5308>
net ipv6_tunnel isatap add
net-config[isatap-tunnel]>
subnet_prefix 2004::
net-config[isatap-tunnel]>
end_point_type Other_IP
net-config[isatap-tunnel]>
ipv4_address 10.29.33.4
net-config[isatap-tunnel]>
save
Related show commands: show net ipv6_tunnel setup and show net ipv6_tunnel status
net ipv6_tunnel isatap edit <row id>
This command configures an existing ISATAP tunnel. After you have issued the net
ipv6_tunnel isatap edit command to specify the row to be edited, you enter the
net-config [isatap-tunnel] mode, and then you can change the subnet prefix only.
Step 1 Format net ipv6_tunnel isatap add
Mode net
Step 2 Format subnet_prefix <subnet prefix>
end_point_type {LAN | Other_IP {ipv4_address <address>}}
Mode net-config [isatap-tunnel]
Keyword Associated Keyword to
Select or Parameter to Type
Description
subnet_prefix subnet prefix The IPv6 64-bit subnet prefix (string) that is assigned to
the logical ISATAP subnet for this intranet.
end_point_type LAN or Other_IP Specifies the local endpoint IP address for the tunnel that
is initiated on the VPN firewall. The endpoint can be the
LAN interface or a specific LAN IPv4 address. If you select
Other_IP, you also need to issue the ipv4_address
keyword to specify an IPv4 address.
ipv4_address ipaddress The IPv4 address of a local endpoint that is not a LAN IPv4
address.
Step 1 Format net ipv6_tunnel isatap edit <row id>
Mode net