H3C S6550X-HI Series Command Reference Manual page 2269

Table of Contents

Advertisement

local-address
Use
local-address
Use
undo local-address
Syntax
local-address { ipv4-address | ipv6 ipv6-address }
undo local-address
Default
The primary IPv4 address of the interface to which the IPsec policy is applied is used as the local
IPv4 address. The first IPv6 address of the interface to which the IPsec policy is applied is used as
the local IPv6 address.
Views
IPsec policy view
IPsec policy template view
Predefined user roles
network-admin
Parameters
ipv4-address
ipv6 ipv6-address
Usage guidelines
The remote IP address on the IKE negotiation initiator must be the same as the local address on the
IKE negotiation responder.
Examples
# Configure local address 1.1.1.1 for the IPsec tunnel.
<Sysname> system-view
[
]
Sysname
[
Sysname-ipsec-policy-isakmp-map-1
Related commands
remote-address
pfs
Use
to enable the Perfect Forward Secrecy (PFS) feature for an IPsec transform set.
pfs
Use
undo pfs
Syntax
pfs { dh-group1 | dh-group2 | dh-group5 | dh-group14 | dh-group19 |
dh-group20 | dh-group24 }
undo pfs
Default
The PFS feature is disabled for the IPsec transform set.
to configure the local IP address for the IPsec tunnel.
to restore the default.
: Specifies the local IPv4 address for the IPsec tunnel.
: Specifies the local IPv6 address for the IPsec tunnel.
ipsec policy map 1 isakmp
to restore the default.
]
local-address 1.1.1.1
44

Advertisement

Table of Contents
loading

Table of Contents