Cyberoam supports Four (4) methods of IP tunneling to promote interoperability between IPv4 and IPv6 networks. It is a mechanism to encapsulate one network protocol as payload for another network protocol i.e. either an IPv6 packet is encapsulated in to an IPv4 packet, for communication between IPv6 enabled hosts/networks via an IPv4 network or vice-a-versa.
Cyberoam supports following types of IP Tunneling methods:
The devices at the ends of an IPv6 over IPv4 tunnel or IPv4 over IPv6 tunnel must support IPv4/IPv6 dual stack.
Establish a 6in4 tunnel using the tunnel broker service named Hurricane Electric (HE).
Hurricane Electric (HE) provides free IPv6 tunnel broker service to allow users to connect to IPv6 networks over IPv4 backbone. To create a 6to4 tunnel, users must register at http://www.tunnelbroker.net.
Register with HE at http://www.tunnelbroker.net.
This configuration consists of Two (2) parts:
You must be logged on to the Web Admin Console as an administrator with Read-Write permission for relevant feature(s).
Step 1: Create 6in4 Tunnel
Specify a name to identify theTunnel
Specify the Tunnel Type.
Select the zone to create the tunnel for, from the options available. The tunnel will cater to the traffic of selected zone.
Local End Point
Specify IP Address of the Local End Point (as specified in HE configuration) of the tunnel.
Specify IPv4 Address for 6to4, 6in4 and 6rd tunnels.
Specify IPv6 Address for 4in6 tunnel.
Remote End Point
Specify IP Address of the Remote End Point of the tunnel. Here, specify Server IPv4 Address mentioned in the HE Tunnel Details page.
Specify IPv4 Address for 6in4 tunnel.
Click OK to create the tunnel.
Step 2: Add Default Static Route
Step 3: Configure LAN Network on IPv6
Step 4: Enable Router Advertisement on LAN Interface
Go to Network > Router Advertisement > Router Advertisement and click Add to add an advertisement as per parameters below.
Select an interface for router advertisement.
All IPv6 enabled physical interfaces, LAG, VLAN and Bridge interfaces can be selected.
Select to set the Other Flag. When this flag is set, DHCPv6 client obtains other network parameters like DNS server, Domain Name, NIS, NISP, SIP, SNTP, BCMS servers from DHCPv6 server.
The option must be selected if a DHCPv6 Server is available.
Prefix Advertisement Configuration
Prefix Advertisement includes zero or more prefix options containing information that the default gateway advertises. This information is used by stateless address auto configuration to auto-generate a global IPv6 Address.
Here, specify the Routed IPv6 Prefix from the HE Tunnel Details page that you configured in the LAN Interface.
Click OK to save advertisement.
Step 5: Configure DHCP Server
Go to Network > DHCP > Server and configure a new server as per parameters below. This is specifically required to assign DNS Server Address to clients.
Provide a name to identify DHCPv6 server uniquely.
Select any internal interface to set it as DHCPv6 server. DHCP service can be configured on virtual sub-interface but cannot be configured on Interface alias.
Dynamic Lease IP
2001:470:d:96d::100 - 2001:470:d:96d::200
Specify range of IPv6 Address from which DHCP server must assign to the clients and subnet mask for the IPv6 Address range. It is also possible to configure multiple IPv6 range for a same interface.
You can provide multiple IP range for the DHCP Server.
Click OK to save DHCP configuration.
The above configuration allows Cyberoam to establish a 6in4 tunnel using the Tunnel Broker ServiceHurricane Electric (HE).
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.