topic Could you please suggest me a in Network Security

how to create site to site tunnel vpn on IPv6, and route IPv4 network

Lasandro Lopez — Tue, 12 Mar 2019 03:59:06 GMT

i want to do this scenario

Site1:

LAN1: 192.168.1.0/24,

where router cisco is 192.168.1.1 -> fa0/1

WAN1: running on IPv6: FD00::1/8 -> fa0/0

Site2

LAN2: 192.168.2.0/24,

where router cisco is 192.168.2.1 -> fa0/1

WAN2: running on IPv6: FD00::2/8 -> fa0/0

There is a direct conneciton between Site1 & Site2 on WAN interfaces.
On both sites, there are running IPv4 hosts/devices.

Now, i want to create site to site connection, to route IPv4 traffic between these two sites.
i want create ipv6 tunnel interfaces, and i want to add ip sec encryption also.

How can i do this?
Regards!

You can use GRE-tunnels with

Karsten Iwen — Sat, 22 Mar 2014 23:17:31 GMT

You can use GRE-tunnels with IPsec tunnel-protection for that.

Could you please suggest me a

Lasandro Lopez — Sun, 23 Mar 2014 09:30:06 GMT

Could you please suggest me a link where this is explained?
i've planned to used IPIPv6 interfaces.
Let me know.
Regards!

Here is a lnks for that

Karsten Iwen — Sun, 23 Mar 2014 10:08:43 GMT

Here is a lnks for that solution:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/interface/configuration/xe-3s/ir-xe-3s-book/ir-gre-ipv6-tunls-xe.html

IN attach the network diagram

Lasandro Lopez — Sun, 23 Mar 2014 14:17:34 GMT

IN attach the network diagram.
There will be approximately 70 sites.

and i want that connections between site routers and HQ's router, to be in IPv6, and encryption between IPv4 on site subnets and IPv4 on HQ's subnet 172.16.1.0/24

Well, 70 sites is slightly

Karsten Iwen — Sun, 23 Mar 2014 16:54:11 GMT

Well, 70 sites is slightly more then the two sites you were talking about before. But with a scalable authentication like certificates and a half day of hard work it would still be possible to configure the 70 tunnel interfaces on the hub.

But with that amount of sites, FlexVPN could be the better choice:

http://www.cisco.com/c/en/us/support/docs/security/flexvpn/116528-config-flexvpn-00.html

Ok, but i'm still not clear,

Lasandro Lopez — Sun, 23 Mar 2014 17:02:46 GMT

Ok, but i'm still not clear, how to route IPv4 traffic between sites, on IPv6 links.

Everywhere, on internet, on

Lasandro Lopez — Sun, 23 Mar 2014 19:12:13 GMT

Everywhere, on internet, on cisco ebooks, i found:

IPv6 inside IPv4 packets

but i want the revers:

IPv4 packtes, inside IPv6.
Did you check the network diagram?
Regards!

Did you look at the links?

Karsten Iwen — Sun, 23 Mar 2014 20:43:35 GMT

Did you look at the links? There are examples also for that.