administrator needs to configure protocol and addresses used for the outer

the administrator needs to configure the protocol and addresses used for the outer

Also, administrator needs to configure protocol and addresses used for the

The administrator also needs to configure the protocol and addresses for the

inner header, by using

inner header, with

Note that IPv6 link-local address

Note that IPv6 link-local addresses

(those start with

(those that start with

will be automatically configured whenever possible.

will be automatically be configured whenever possible.

You may need to remove IPv6 link-local address manually using

You may need to remove IPv6 link-local addresses manually using

when you would like to disable the use of IPv6 as inner header

if you want to disable the use of IPv6 as the inner header

(like when you need pure IPv4-over-IPv6 tunnel).

(for example, if you need a pure IPv4-over-IPv6 tunnel).

Finally, use routing table to route the packets toward

Finally, you must modify the routing table to route the packets through the

can be configured to be ECN friendly.

pseudo-device can be configured to be ECN friendly.

can be configured to be ECN friendly, as described in

pseudo-device can be configured to be ECN friendly, as described in

This is turned off by default, and can be turned on by

This is turned off by default, and can be turned on by the

will show a normal behavior, like described in RFC2893.

will show normal behavior, as described in RFC2893.

Malicious party may try to circumvent security filters by using

A malicious party may try to circumvent security filters by using

performs martian filter and ingress filter against outer source address,

performs both martian and ingress filtering against the outer source address

Note that martian/ingress filters are no way complete.

Note that martian/ingress filters are in no way complete.

Ingress filter can be turned off by

Ingress filtering can be turned off by

device first appeared in WIDE hydrangea IPv6 kit.

device first appeared in the WIDE hydrangea IPv6 kit.

There are many tunnelling protocol specifications,

There are many tunnelling protocol specifications, all

defined differently from each other.

defined differently from each other. The

may not interoperate with peers which are based on different specifications,

pseudo-device may not interoperate with peers which are based on different specifications,

configured to

configured in the

makes sense.

interface makes sense.

Make sure to configure an address which belongs to your node.

Make sure to specify an address which belongs to your node.

and your node will generate packets with a spoofed source address.

and it will generate packets with a spoofed source address.

If the outer protocol is IPv6, path MTU discovery for encapsulated packet

If the outer protocol is IPv6, path MTU discovery for encapsulated packets

to 1240 or smaller, when outer header is IPv6 and inner header is IPv4.

to 1240 or smaller, when the outer header is IPv6 and the inner header is IPv4.

does not translate ICMP messages for outer header into inner header.

pseudo-device does not translate ICMP messages for the outer header into the inner header.

The behavior was obsoleted and is no longer supported.

The behavior is obsolete and is no longer supported.