VPN 터널 및 BGP 세션이 설정되었는지 확인하고 새 외부 IPv6 터널에 2단계의 동적 경로가 설치되어 있는지 확인합니다.
선택사항: 워크로드가 적은 경우 기본 우선순위가 더 높은 경로를 사용하여 아웃바운드 트래픽이 실제로 IPv6 터널을 사용하는지 테스트하는 것이 좋습니다. 처리량 한도가 공지된 경로에 대한 모든 트래픽을 수용할 수 있는지 확인합니다. 새 터널이 트래픽을 성공적으로 지원하는지 확인한 후 기본 우선순위를 다른 터널과 동일하게 업데이트합니다.
새 인스턴스를 만든 경우 BGP 세션, VPN 터널, VPN 게이트웨이, Cloud Router와 같은 IPv4 인프라를 삭제합니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-11(UTC)"],[],[],null,["# Migrate from an IPv4 HA VPN gateway to an IPv6 HA VPN gateway\n\nThis page describes how to migrate your workloads from an\nHA VPN with IPv4 interfaces to an\nHA VPN with IPv6 interfaces.\n\n- To support both IPv4 and IPv6 workloads, you can use dual-stack HA VPN with external IPv6 interfaces.\n- To support only IPv6 workloads, you can use an IPv6-only HA VPN.\n\nThis page describes how to migrate a single HA VPN gateway\nwith two tunnels. If you have more HA VPN gateways and\ntunnels, you can migrate them one after the other.\n\nBefore you begin\n----------------\n\n- Analyze your existing tunnel load and plan the creation or deletion of tunnels while making sure that you don't overload any tunnel, which can result in packet loss.\n- Use non-critical workloads to test the workflow to avoid unplanned downtime on production servers due to misconfiguration.\n- If you use tunnels that allow only IPv6 workloads, IPv4 packets are dropped.\n- Verify that your organization policies allow IPv6 peer IP addresses and other hybrid features that you plan to use.\n- Note that the traffic through any individual tunnel must not exceed the 250,000 packets per second for the sum of inbound and outbound traffic. Depending on average packet size in the tunnel, 250,000 packets per second is equivalent to between 1 Gbps and 3 Gbps of bandwidth.\n\nSet up and migrate to IPv6 HA VPN gateway\n-----------------------------------------\n\n1. Create the external IPv6 HA VPN gateways.\n\n - Plan for your workloads\n - If you plan to use IPv4 workloads, use the **IPV4_IPV6** stack type while creating the VPN gateway.\n - If you plan to use both IPv4 and IPv6 workloads, use the multiprotocol BGP sessions.\n - Plan your BGP sessions\n - If you want to use IPv4-based BGP sessions, use the **IPV4_IPV6** stack type while creating the VPN gateway.\n - If you plan to use IPv6-based BGP sessions, use the **IPV4_IPV6** or **IPV6_ONLY** stack types while creating the VPN gateway.\n\n Follow the steps in\n [Create HA VPN gateways to connect VPC networks](/network-connectivity/docs/vpn/how-to/creating-ha-vpn2).\n2. Make a note of the existing dynamic routes associated with the tunnels\n that you plan to replace.\n\n 1. In the Google Cloud console, go to the **Routes** page.\n\n [Go to Routes](https://console.cloud.google.com/networking/routes/list)\n 2. On the **Effective routes** tab, do the following:\n\n - Choose a VPC network.\n - Choose a region.\n 3. Click **View**.\n\n 4. In the **Next hop** column, look for the name of your tunnel. Copy\n the destination ranges associated with the routes.\n\n For more information, see\n [Dynamic (BGP) routing](/network-connectivity/docs/vpn/concepts/choosing-networks-routing#dynamic-routing).\n3. [Create a new Cloud Router](/network-connectivity/docs/vpn/how-to/creating-ha-vpn2#create-cloud-routers) for the IPv6 tunnels.\n You can also use an existing Cloud Router.\n\n4. [Create VPN tunnels](/network-connectivity/docs/vpn/how-to/creating-ha-vpn2#create-vpn-tunnels)\n between the HA VPN gateways and the peer gateways.\n\n5. [Create BGP sessions](/network-connectivity/docs/vpn/how-to/creating-ha-vpn2#create-bgp-sessions).\n\n - Make sure the VPN tunnel and BGP session are established, and verify that the dynamic routes from step 2 are installed for the new external IPv6 tunnel.\n - **Optional:** If you have small workloads, consider using a higher base priority route to test that outbound traffic actually uses the IPv6 tunnels. Make sure that your throughput limit can accommodate *all\n traffic* to the advertised routes. After verifying that the new tunnels support traffic successfully, update their base priority to the same as the other tunnels.\n6. Delete the IPv4 infrastructure: BGP sessions, VPN tunnels, VPN gateways, and\n Cloud Routers if you created new instances."]]
