Nat Traversal; Peer - H3C MSR 20-20 Command Reference Manual

2168 C 141: IKE C
HAPTER
Description
Example

nat traversal

Syntax
View
Parameter
Description
Example

peer

Syntax
View
Parameter
C
ONFIGURATION OMMANDS
Use the local-address
in IKE negotiation.
Use the
undo local-address
By default, the master address of the interface referencing the IPSec policy is used
as the local gateway IP address for IKE negotiation. This command is required only
when you want to specify a special address for the local gateway.
# Set the IP address of the local gateway to 1.1.1.1.
<Sysname> system-view
[Sysname] ike peer xhy
[Sysname-ike-peer-xhy] local-address 1.1.1.1
nat traversal
undo nat traversal
IKE peer view
None
Use the
nat traversal
IKE/IPSec.
Use the undo nat traversal
IKE/IPSec.
By default, the NAT traversal function is disabled.
# Enable the NAT traversal function for IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] nat traversal
peer { multi-subnet | single-subnet }
undo peer
IKE peer view
multi-subnet: Sets the subnet type to multiple.
single-subnet: Sets the subnet type to single.
command to configure the IP address of the local gateway
command to remove the configuration.
command to enable the NAT traversal function of
command to disable the NAT traversal function of