Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 on Routing Platforms => Topic started by: broquea on February 08, 2008, 02:03:56 PM

Title: Configuring a tunnel under Cisco & Juniper & Vyatta & Alcatel
Post by: broquea on February 08, 2008, 02:03:56 PM
Users will always be able to view the example configurations provided in the interface, however we also wanted to make them available on the forums. I'll cover the Cisco & Juniper & Vyatta commands used. I won't be using valid IPv4/IPv6 information in the examples, but the example configurations in the broker's interface will provide the full commands with your relevant account information.

Legend of variables:
$ipv4a = tunnel server's IPv4 IP
$ipv4b = user's IPv4 IP
$ipv6a = tunnel server's side of point-to-point /64 allocation
$ipv6b = user's side of point-to-point /64 allocation

interface tunnel0
 description Hurricane Electric IPv6 Tunnel Broker
 no ip address
 ipv6 enable
 ipv6 address $ipv6b
 tunnel source $ipv4b
 tunnel destination $ipv4a
 tunnel mode ipv6ip
ipv6 route ::/0 tunnel0

interfaces {
    gr-1/0/0 {
         unit 0 {
             tunnel {
                 source $ipv4b;
                 destination $ipv4a;
             family inet6 {
                 address $ipv6b;
rib inet6.0 {
    static {
        route ::/0 {
            $ipv6a ;

edit interfaces tunnel tun0
set encapsulation sit
set local-ip $ipv4b
set remote-ip $ipv4a
set address $ipv6b/64
set description "HE.NET IPv6 Tunnel"
set protocols static interface-route6 ::/0 next-hop-interface tun0

Alcatel Lucent Omniswitch 6850
ipv6 interface hetunnel tunnel 1
ipv6 interface hetunnel tunnel source $ipv4b destination $ipv4a
ipv6 address $ipv6b/64 hetunnel
ipv6 static-route ::/0 gateway $ipv6a
Title: Configuring a Juniper NS-5GT Netscreen (ScreenOS) firewall appliance
Post by: broquea on December 27, 2008, 01:22:53 PM
This was submitted by user techniq for his NetScreen 5GT:

set interface tunnel.1 zone Untrust
set interface tunnel.1 ipv6 mode host
set interface tunnel.1 ipv6 ip $ipv6b/64
set interface tunnel.1 ipv6 enable
set interface tunnel.1 tunnel encap ip6in4 manual
set interface tunnel.1 tunnel local-if untrust dst-ip $ipv4
unset interface tunnel.1 ipv6 nd nud
set interface tunnel.3 ipv6 nd dad-count 0
set route ::/0 interface tunnel.1 gateway $ipv6a
Title: Re: Configuring a tunnel under Cisco & Juniper
Post by: broquea on August 11, 2009, 10:52:36 PM
A user with a new Juniper router/firewall has an updated config for SRX models:
Title: Re: Configuring a tunnel under Cisco & Juniper & Vyatta
Post by: broquea on November 10, 2009, 02:53:11 PM
A user of ours submitted a Vyatta example configuration. Updated this thread's top post and added it to example configurations inside the broker.