H3C S6550X-HI Series Command Reference Manual page 2364

Related commands
display ikev2 profile
ikev2 keychain
match local (IKEv2 profile view)
Use
match local
applied.
Use
undo match local
can be applied.
Syntax
match local address { interface-type interface-number | ipv4-address |
ipv6 ipv6-address }
undo match local address { interface-type interface-number | ipv4-address
| ipv6 ipv6-address }
Default
An IKEv2 profile can be applied to any local interface or IP address.
Views
IKEv2 profile view
Predefined user roles
network-admin
Parameters
: Specifies a local interface or IP address to which an IKEv2 profile can be applied.
address
interface-type interface-number
can be any Layer 3 interface.
ipv4-address
ipv6 ipv6-address
Usage guidelines
Use this command to specify which address or interface can use the IKEv2 profile for IKEv2
negotiation. The interface is the interface that receives IKEv2 packets. The IP address is the IP
address of the interface that receives IKEv2 packets.
An IKEv2 profile configured earlier has a higher priority. To give an IKEv2 profile that is configured
later a higher priority, you can configure the
For example, suppose you configured IKEv2 profile A before configuring IKEv2 profile B, and you
configured the
for IKEv2 profile A and the
command for IKEv2 profile B. For the local interface with the IP address 3.3.3.3 to negotiate with the
peer 2.2.2.6, IKEv2 profile A is preferred because IKEv2 profile A was configured earlier. To use
IKEv2 profile B, you can use this command to restrict the application scope of IKEv2 profile B to IPv4
address 3.3.3.3.
You can specify multiple applicable local interfaces or IP addresses for an IKEv2 profile.
Examples
# Create an IKEv2 profile named profile1.
<Sysname> system-view
to specify a local interface or a local IP address to which an IKEv2 profile can be
to remove a local interface or a local IP address to which an IKEv2 profile
: Specifies the IPv4 address of a local interface.
: Specifies the IPv6 address of a local interface.
match remote identity address range 2.2.2.1 2.2.2.100
match remote identity address range 2.2.2.1 2.2.2.10
: Specifies a local interface by its type and number. It
command or this command for the profile.
priority
30
command