Tunnel Remote - 3Com 3C13618 Command Reference Manual

Description
Using the tunnel local command, you can configure the local address of a security
tunnel. Using the undo tunnel local command, you can cancel the local address set
in the IPSec policy.
By default, no IP address at the local end of the security tunnel.
This command is applicable to the IPSec module of the operating system and crypto
card.
It is not necessary to set a local address for an IPSec policy in isakmp mode, so this
command is invalid in this situation. IKE can automatically obtain the local address
from the interface where this IPSec policy is applied.
As for the IPSec policy in manual mode, it is necessary to set the local address
before the SA is created. A security tunnel is set up between the local and peer end,
so the local address and remote address must be correctly configured before a
security tunnel can be set up.
For related commands, see ipsec policy (system view),ipsec policy (interface
view),security acl, tunnel remote, sa duration, sa inbound/outbound, proposal.
Example
# Configure the local address for the IPSec policy, which is applied at Serial 0 whose
IP address is 10.0.0.1.
[3Com]ipsec policy guangzhou 100 manual
[3Com-ipsec-policy-guangzhou-100] tunnel local 10.0.0.1
[3Com-Serial0]ipsec policy guangzhou

4.1.43 tunnel remote

Syntax
tunnel remote ip-address
undo tunnel remote
View
IPSec policy view
Parameter
ip-address: Remote address.
Security
87