HP A6600 Configuration Manual page 279

To configure an IPsec tunnel interface:
To do...
1. Enter system view.
2. Create a tunnel interface and
enter its view.
Assign an IPv4 address to the
3.
tunnel interface.
4. Set the tunnel mode of the
tunnel interface to IPsec over
IPv4.
5. Specify the source address or
interface of the tunnel
interface.
6. Specify the destination
address of the tunnel
interface.
7. Apply an IPsec profile to the
tunnel interface.
NOTE:
For more information about interface tunnel, tunnel-protocol, source and destination, see
•
IP Services Commands Reference
An IPsec profile cannot be applied to both an IPsec tunnel interface and a DVPN tunnel interface
•
simultaneously.
An IPsec tunnel interface can reference only one IPsec profile.
•
Apply an IPsec profile to only one IPsec tunnel interface. Although an IPsec profile can be applied to
•
multiple IPsec tunnel interfaces, it takes effect only on the IPsec tunnel interface that goes up first.
Command...
system-view
interface tunnel number
ip address ip-address { mask |
mask-length } [ sub ]
tunnel-protocol ipsec ipv4
source { ip-address | interface-
type interface-number }
destination ip-address
ipsec profile profile-name
.
267
Remarks
—
Required.
By default, no tunnel interface exists
on the router.
Required.
By default, no IPv4 address is
assigned to a tunnel interface.
Required.
IPsec over IPv4 by default.
Required.
By default, no source address or
interface is specified for a tunnel
interface.
If you specify an interface, the tunnel
interface takes the primary IP
address of the source interface.
Optional for an IKE negotiation
responder, and required for an IKE
negotiation initiator.
By default, no tunnel destination
address is configured.
Required.
The IPsec profile must have been
created and must not have been
applied to any DVPN tunnel
interface.
Layer 3
—