Source - HP FlexNetwork MSR Series Command Reference Manual

[Sysname-pki-cert-acp-mypolicy] rule 1 permit mygroup
Related commands
attribute
display pki certificate access-control-policy
pki certificate attribute-group

source

Use source to specify the source IP address for PKI protocol packets.
Use undo source to restore the default.
Syntax
source { ip | ipv6 } { ip-address | interface interface-type interface-number }
undo source
Default
The source IP address of PKI protocol packets is the IP address of their outgoing interface.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
ip: Specifies a source IPv4 address.
ipv6: Specifies a source IPv6 address.
ip-address: Specifies the IPv4 or IPv6 address.
interface interface-type interface-number: Specifies an interface by its type and number. The
interface's primary IP address will be used as the source IP address for PKI protocol packets.
Usage guidelines
Use this command to specify the source IP address for PKI protocol packets. You can also specify a
source interface if the IP address is dynamically obtained.
Make sure there is a route between the source IP address and the CA server.
You can specify only one source IP address in a PKI domain. If you execute this command multiple
times, the most recent configuration takes effect.
Examples
# Set the source IP address to 111.1.1.8 for PKI protocol packets.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] source ip 111.1.1.8
# Set the source IPv6 address to 1::8 for PKI protocol packets.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] source ipv6 1::8
# Set the source interface to GigabitEthernet 1/0/1 for PKI protocol packets.
<Sysname> system-view
452