The ipv6 route-static vpn-instance command configures IPv6 static routes in a VPN instance.
The undo ipv6 route-static vpn-instance command withdraws the IPv6 unicast static routes in a VPN instance.
By default, the system does not configure IPv6 static routes for VPN instances.
ipv6 route-static vpn-instance vpn-instance-name dest-ipv6-address prefix-length interface-type interface-number [ nexthop-ipv6-address ] [ preference preference | tag tag ] * [ track bfd-session bfd-name ] [ description text ]
ipv6 route-static vpn-instance vpn-instance-name dest-ipv6-address prefix-length nexthop-ipv6-address public [ preference preference | tag tag ] * [ track bfd-session bfd-name ] [ description text ]
ipv6 route-static vpn-instance vsys-name dest-ipv6-address prefix-length { nexthop-ipv6-address | public } [ preference preference | tag tag ] * [ description text ]
ipv6 route-static vpn-instance vpn-instance-name dest-ipv6-address prefix-length [ vpn-instance vpn-destination-name ] nexthop-ipv6-address [ preference preference | tag tag ] * [ track bfd-session bfd-name ] [ description text ]
ipv6 route-static vpn-instance vsys-name dest-ipv6-address prefix-length vpn-instance vsys-destination-name [ preference preference | tag tag ] * [ description text ]
undo ipv6 route-static vpn-instance vpn-instance-name dest-ipv6-address prefix-length [ interface-type interface-number ] [ nexthop-ipv6-address ] [ preference preference | tag tag ] * [ track bfd-session ]
undo ipv6 route-static vpn-instance vsys-name dest-ipv6-address prefix-length { nexthop-ipv6-address | public } [ preference preference | tag tag ] *
undo ipv6 route-static vpn-instance vsys-name dest-ipv6-address prefix-length vpn-instance vsys-destination-name [ preference preference | tag tag ] *
undo ipv6 route-static vpn-instance vpn-instance-name all
| Parameter | Description | Value |
|---|---|---|
vpn-instance-name |
Specifies the name of a VPN instance. Each VPN instance has its own unicast routing table, and the configured static routes are installed into the routing table of the specified VPN instance. NOTE:
If the source VPN instance is specified as a VPN instance and the destination VPN instance is public, the next hop must be configured. |
It must be the name of an existing VPN instance. |
vsys-name |
Specifies the name of a virtual system. NOTE:
When the source VPN instance is specified as a virtual system, the outbound interface must be bound to this virtual system. If the source VPN instance is specified as a virtual system and the destination VPN instance is public, the next hop cannot be configured and the outbound interface is a Virtual-if interface. |
The virtual system must already exist. |
dest-ipv6-address |
Specifies the destination IPv6 address. |
The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
prefix-length |
Specifies the length of an IPv6 prefix, namely, the number of consecutive 1s in the mask. |
It is an integer ranging from 0 to 128. |
interface-type |
Specifies the type of an interface. |
- |
interface-number |
Specifies the number of an interface. |
- |
nexthop-ipv6-address |
Specifies the next hop IPv6 address. |
The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
vpn-instance vpn-destination-name |
Specifies the name of the destination VPN instance. After the destination VPN instance name is configured, the FW can search the static routing table for the outbound interface to the destination VPN instance according to the configured gateway address. NOTE:
If the destination VPN instance is specified as a VPN instance, the next hop must be configured. After a VPN instance with the next hop configured is switched to a virtual system, the next hop configuration is deleted. |
It must be the name of an existing VPN instance. |
vpn-instance vsys-destination-name |
Specifies the name of a destination virtual system. NOTE:
If the destination VPN instance is specified as a virtual system, the next hop cannot be configured. |
The virtual system must already exist. |
public |
Indicates that the specified nexthop-ipv6-address is a public network address rather than a source VPN instance address.
|
- |
preference preference |
Specifies the preference of a static route. |
It is an integer ranging from 1 to 255. The smaller the value is, the higher the preference is. |
tag tag |
Specifies the tag value of a static route. By configuring different tag values, you can classify static routes to implement different routing policies. For example, routing protocols can import routes with specified tag values through routing policies. |
The value is an integer ranging from 1 to 4294967295. By default, it is 0. |
track bfd-session bfd-name |
Specifies the BFD session bound to a static route. |
The value is a string of 1 to 15 case-insensitive characters, spaces not supported. |
description text |
Specifies the description of static routes. |
The description is a string of 1 to 80 characters that can contain spaces. |
all |
Deletes all the IPv6 static routes configured for the specified VPN instance. |
- |
Applicable Environment
To configure VPN users to access a public network, you can perform Network Address Translation (NAT) or run the ipv6 route-static vpn-instance command with the keyword public to configure the VPN route with the next hop being the public network address.
You can configure description text to add the description of static routes so that the administrator can check and maintain static routes easily. You can run the display this or display current-configuration command in the system view to view the description.
Prerequisite
The ip vpn-instance command has been used to creat a VPN instance.
Precautions
If the destination address and the prefix length are set to all 0s, it indicates that a default route is configured.
However, after network faults occur or the network topology changes, static routes cannot automatically change. Therefore, configure static routes with caution.