IPIP

IPIP, a variation of DS-Lite, is used to tunnel IPv4 traffic over IPv6-only networks. As in DS-Lite, the IPv4 traffic is tunneled over an existing IPv6 connection. The DS-Lite/IPIP tunnel is created between the client (gateway) and a peer (AFTR which resides on the ISP and is configured statically or acquired via DHCPv6).

IPIP uses the same IPv4-over-IPv6 tunnel as DS-Lite, but you can configure a static IPv4 address, which is globally routable.

The gateway first establishes an IPv6 connection to the ISP. The IPv6 address consists of:

• Prefix - Obtained using prefix delegation or RA messages (SLAAC).

• Suffix - Configured by the user

Comparison of DS-Lite and IPIP:

• Both DS-Lite and IPIP use an IPv6 internet connection to carry the IPv4 traffic.

• DS-Lite – The gateway address is non-globally-routable and automatically selected from the subnet 192.0.0.0/29.

  IPIP - The gateway address is globally-routable and you configure it manually.

• In both DS-Lite and IPIP, you can get the prefix of the IPv6 address dynamically using SLAAC.

• DS-Lite – The IPv6 address is automatically generated based on the acquired prefix and an auto-generated suffix, based on the interface Ethernet MAC address.

  IPIP - The IPv6 address must end with a manually configured suffix.

• When the prefix of the IPv6 carrying the IPIP connection is changed, you must notify the IPIP tunnel provider over HTTP.

The WAN connection type of the IPIP master must be Dynamic IPv6.

To enable IPIP:

1. Enable the IPIP feature in Advanced Settings.

2. Configure an IPv6 Internet connection.

3. In the Configuring Internet Connectivity page, click New/Edit the IPv4 connection.

   The Edit Internet Connection window opens.

4. For Connection type, select IPv4 over IPv6 (IPIP).

   Note - Make sure the interface type is the same for both IPv4 and IPv6. For example, if the IPv4 the interface is configured as WAN, the IPv6 interface must also be configured as WAN.

5. The AFTR address field appears. This field shows the hostname or IPv6 address for DS-Lite/IPIP tunnel.

   Note - This field is optional when the IPv6 connection type is DHCPv6.

6. In the Linked connection field, select the IPv6 connection name.

   This is the IPv6 Internet connection index on which the DS-Lite/IPIP tunnel is defined.

   Note - The IPIP tunnel and its linked IPv6 connection must be on the same appliance port.

7. In the VNE Settings section:

   1. Select the Service name from the pull-down menu:

      • Transix

      • v6 Connect

        The relevant Update server URL appears automatically.

   2. Enter the Username and password.

8. In the Advanced tab:

   1. In the IPv4 over IPv6 (IPIP) Settings section, select Enable static IPv6 suffix.

      Note - This is configured in the IPv6 connection configuration window. Otherwise, IPIP is configured on the IPv4 connection.

   2. Configure the default MTU of the IPIP interface to 1460 (IPv4 default = 1500). The size of the IPv6 header is 40.

9. Click Apply.