Include - H3C MSR Series Command Reference Manual

<Sysname> system-view
[Sysname] sslvpn gateway gateway1
[Sysname-sslvpn-gateway-gateway1] http-redirect port 1025

include

Use include to add an include route to a route list.
Use undo include to delete an include route from a route list.
Syntax
include ip-address { mask | mask-length }
undo include ip-address { mask | mask-length }
Default
No include routes exist.
Views
Route list view
Predefined user roles
network-admin
Parameters
ip-address: Specifies the destination IP address of the route. It cannot be a multicast, broadcast, or
loopback address. The specified IP address must be the address of the network segment where the
internal servers reside.
mask: Specifies the subnet mask.
mask-length: Specifies the mask length of the route, an integer in the range of 0 to 32.
Usage guidelines
To permit user access to specific network nodes or segments behind an SSL VPN gateway,
configure include routes for those nodes or segments.
When a client accesses an SSL VPN gateway in IP mode, the SSL VPN gateway issues the include
routes to the client. The client adds the include routes to the local routing table, using the VNIC as the
output interface. Traffic that matches the include routes are sent to the SSL VPN gateway through
the VNIC.
You can add multiple routes to a route list.
If you execute the include and exclude command to add the same route to a route list, the most
recent configuration takes effect.
Examples
# Add include route 10.0.0.0/8 to route list rtlist.
<Sysname> system-view
[Sysname] sslvpn context ctx1
[Sysname-sslvpn-context-ctx1] ip-route-list rtlist
[Sysname-sslvpn-context-ctx1-route-list-rtlist] include 10.0.0.0 8
Related commands
exclude
766