how to create site to site tunnel vpn on IPv6, and route IPv4 network

[Lasandro Lopez]

i want to do this scenario
 

Site1:

LAN1: 192.168.1.0/24,

where router cisco is 192.168.1.1 -> fa0/1

WAN1: running on IPv6: FD00::1/8 -> fa0/0

Site2

LAN2: 192.168.2.0/24, 

where router cisco is 192.168.2.1 -> fa0/1

WAN2: running on IPv6: FD00::2/8 -> fa0/0

There is a direct conneciton between Site1 & Site2 on WAN interfaces.
On both sites, there are running IPv4 hosts/devices.

Now, i want to create site to site connection, to route IPv4 traffic between these two sites.
i want create ipv6 tunnel interfaces, and i want to add ip sec encryption also.

How can i do this?
Regards!

[Karsten Iwen]

You can use GRE-tunnels with IPsec tunnel-protection for that.

[Lasandro Lopez]

Could you please suggest me a link where this is explained?
i've planned to used IPIPv6 interfaces.
Let me know.
Regards!

[Karsten Iwen]

Here is a lnks for that solution:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/interface/configuration/xe-3s/ir-xe-3s-book/ir-gre-ipv6-tunls-xe.html

[Lasandro Lopez]

IN attach the network diagram.
There will be approximately 70 sites.

and i want that connections between site routers and HQ's router, to be in IPv6, and encryption between IPv4 on site subnets and IPv4 on HQ's subnet 172.16.1.0/24

[Karsten Iwen]

Well, 70 sites is slightly more then the two sites you were talking about before. But with a scalable authentication like certificates and a half day of hard work it would still be possible to configure the 70 tunnel interfaces on the hub.

But with that amount of sites, FlexVPN could be the better choice:

http://www.cisco.com/c/en/us/support/docs/security/flexvpn/116528-config-flexvpn-00.html

[Lasandro Lopez]

Ok, but i'm still not clear, how to route IPv4 traffic between sites, on IPv6 links.

[Karsten Iwen]

Did you look at the links? There are examples also for that.

[Lasandro Lopez]

Everywhere, on internet, on cisco ebooks, i found: 

IPv6 inside IPv4 packets

but i want the revers:

IPv4 packtes, inside IPv6.
Did you check the network diagram?
Regards!