Tunnel Local Selector - Allied Telesis AT-AR3050S Command Reference Manual

GRE T C
UNNELING OMMANDS

TUNNEL LOCAL SELECTOR

tunnel local selector
Overview Use this command to specify a source address as the traffic selector. A traffic
selector is an agreement between IKE peers to permit traffic through a tunnel if the
traffic matches a specified pair of local and remote addresses.
Use the no variant of this command to remove the source address and traffic
selector.
tunnel local selector {<ipv4-address>|<ipv6-address>}
Syntax
no tunnel local selector
Default No traffic selector is specified.
Mode Interface Configuration
Usage The Security Policy Database (SPD) stores the static IPsec configuration on how to
process different types of traffic entering and leaving the device. The SPD is a list
of selectors that define the matching criteria for packets that must be protected.
For GRE based tunnels these selectors specify the source and destination
addresses of the tunnels and IP protocol type 47 (GRE). If outgoing packets match
these selectors, then the packet is marked for IPsec processing using the SA or SA's
linked to from the policy entry.
Examples To specify a source address as the traffic selector for the traffic to match for
tunnel0, use the commands below:
awplus#
awplus(config)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
To remove the source address from tunnel0, use the commands below:
awplus#
awplus(config)#
awplus(config-if)#
C613-50077-01 REV A
Parameter
<ipv4-address>
<ipv6-address>
configure terminal
interface tunnel0
configure terminal
interface tunnel6
Command Reference for AT-AR3050S
AlliedWare Plus™ Operating System - Version 5.4.5-2.x
Description
IPv4 address in the format A.B.C.D/M
IPv6 address in the format X:X::X:X/M
tunnel source eth1
tunnel destination 10.0.0.2
tunnel local name office
tunnel mode ipsec ipv4
tunnel local selector 192.168.1.0/24
tunnel remote selector 192.168.2.0/24
no tunnel local selector
2340