Reverse-Route Preference - HPE FlexNetwork HSR6800 Security Command Reference

# Configure dynamic IPsec RRI to create static routes based on IPsec SAs. Take 1.1.1.3 as the next
hop.
[Sysname] ipsec policy 1 1 isakmp
[Sysname-ipsec-policy-isakmp-1-1] reverse-route remote-peer 1.1.1.3
[Sysname-ipsec-policy-isakmp-1-1] quit
# Display the routing table. The expected route appears in the routing table after the IPsec SA
negotiation succeeds. (Other routes are not shown.)
[Sysname] display ip routing-table
...
Destination/Mask
3.0.0.0/24
# Configure dynamic IPsec RRI to create two static routes based on an IPsec SA: one to the peer
private network 3.0.0.0/24 through the remote tunnel endpoint 1.1.1.2, and the other to the remote
tunnel endpoint through 1.1.1.3.
[Sysname]ipsec policy 1 1 isakmp
[Sysname-ipsec-policy-isakmp-1-1] reverse-route remote-peer 1.1.1.3 gateway
# Display the routing table. The expected routes appear in the routing table after the IPsec SA
negotiation succeeds. (Other routes are not shown.)
[Sysname] display ip routing-table
...
Destination/Mask
1.1.1.2/32
3.0.0.0/24
Related commands
•

reverse-route preference

•
reverse-route tag
reverse-route preference
Use reverse-route preference to change the preference of the static routes created by IPsec RRI.
Use undo reverse-route preference to restore the default.
Syntax
reverse-route preference preference-value
undo reverse-route preference
Views
IPsec policy view
Default command level
2: System level
Parameters
preference-value: Sets a preference value for the static routes created by IPsec RRI. The value
range is 1 to 255. A smaller value represents a higher preference.
Usage guidelines
The default preference for the static routes created by IPsec RRI is 60.
Proto Pre Cost
Static 60 0
Proto Pre Cost
Static 60 0
Static 60 0
290
NextHop Interface
1.1.1.3 GE3/0/1
NextHop Interface
1.1.1.3 GE3/0/1
1.1.1.2 GE3/0/1