H3C SecPath F1800-A Operation Manual page 541

Operation Manual - VPN
H3C SecPath F1800-A Firewall
VII. Assigning the Remote IP Address
Do as follows in IKE peer view.
Table 3-26 Assigning the remote IP address
Assign the remote IP address or IP
address segment.
Remove the remote IP address.
You can carry out multi-instance connections by specifying the VPN of the remote
peers. This configuration takes effect only on the initiator of tunnels. When sending
packets, the initiator of the tunnel just needs to know the transmission interface of
packets.
Using this command, the initiator can specify the VPN where the tunnel peer resides.
As a result, it can know the transmission interface and then send packets. As for the
receiver, the VPN attribute has been set for the received packets. Therefore, even if
this command is not configured, it can still receive packets.
Note:
When you specify an IP address segment, the IKE peer can only be quoted by the
policy template of IPSec.
VIII. Configuring a Remote Name
In aggressive mode, you can use the remote-name command to configure a remote
name.
Do as follows in IKE peer view.
Table 3-27 Configuring a remote name
Configure a remote name.
Remove the remote name.
Note:
In aggressive mode, you can configure the IP address and the remote name.
In main mode, you can only assign the remote IP address.
Action
Action
7-61
Chapter 3 IPSec Configuration
Command
remote-address
[ high-ip-address ]
undo remote-address
Command
remote-name name
undo remote-name
low-ip-address