SonicOS 8 System

Technical Documentation>  Interfaces>  Interface Settings IPv4>  Adding a 4to6 Tunnel Interface
Table of Contents

Adding a 4to6 Tunnel Interface

To add 4 to 6 tunnel interface on the firewall

  1. Navigate to Network > System > Interfaces > Interfaces Settings.

  2. On the Interfaces Settings page, click IPv4.

  3. Click Add Interface and select 4to6 Tunnel Interface. The Add 4to6 Tunnel Interface dialog box is displayed.

  4. In the Tunnel Type drop-down menu, select the tunnel type.

    If you select GRE 4to6 tunnel then you must provide an IP address for the tunnel interface and a subnet mask to define the network range.

  5. Enter a Name for the tunnel interface.

  6. In the Bound to drop-down menu, select an interface that you want to bound with the tunnel.

  7. Specify Local IPv6 Address. you can select either of the following configuration:

    • Use Primary IPv6 Address

    • Specify Local IPv6 Address

  8. Specify AFTR IPv6 Address, you can select either of the following configuration:

    • Configure Static Address

    • Configure FQDN

    • Get via DHCP

  9. Optionally, in the Comment field, enter a comment.

  10. Click the Advance tab.

  11. Turn on the Enable flow reporting toggle button to allow flow reporting on flows created for this interface. By default, the toggle button is turned on.

  12. If you have selected Ds-Lite Softwire as the tunnel type, specify Local IPv4 Address.

    According to the RFC6333, 192.0.0.2 is reserved for B4 element or you may use any addresses within the 192.0.0.0/29 range.

  13. Turn on the Fragment non-VPN outbound packets larger than this Interface's MTU toggle button to fragment the non-VPN outbound packets exceeding the MTU size and prevent packet loss due to size limitation. By default, the toggle button is turned on for the Ds-Lite Softwire tunnel.

    If you turn on the toggle button, The Ignore Don't Fragment (DF) Bit option becomes available.

  14. Turn on the Ignore Don't Fragment (DF) Bit toggle button to allow the system to fragment packets even if the DF bit is set. This helps ensure successful packet delivery in networks with smaller MTU sizes.

  15. Turn on the Do not send ICMP Fragmentation Needed for outbound packets over the Interface MTU to prevent the system from sending ICMP 'Fragmentation Needed' messages when outbound packets exceed the interface's MTU.

  16. Click OK.