R3303-HP HSR6800 Routers Security Command Reference

339
nat traversal
Use nat traversal to enable the NAT traversal function of IKE/IPsec.
Use undo nat traversal to disable the NAT traversal function of IKE/IPsec.
Syntax
nat traversal
undo nat traversal
Default
The NAT traversal function is disabled.
Views
IKE peer view
Default command level
2: System level
Examples
# Enable the NAT traversal function for IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] nat traversal
peer
Use peer to set the subnet type of the peer security gateway for IKE negotiation.
Use undo peer to restore the default.
Syntax
peer { multi-subnet | single-subnet }
undo peer
Default
The subnet is a single one.
Views
IKE peer view
Default command level
2: System level
Parameters
multi-subnet: Sets the subnet type to multiple.
single-subnet: Sets the subnet type to single.
Usage guidelines
Use this command to enable interoperability with a NetScreen device.