HP VPN Firewall Appliances VPN Command Reference

105
An IPsec profile can reference up to six IPsec transform sets. The IKE negotiation process will search for
and use the exactly matched transform set.
Related commands
• ipsec transform-set
• ipsec policy (system view)
• ipsec profile (system view)
Examples
# Configure IPsec policy policy1 to reference IPsec transform set tran1.
[Sysname] ipsec transform-set tran1
[Sysname-ipsec-transform-set-tran1] quit
[Sysname] ipsec policy policy1 100 manual
[Sysname-ipsec-policy-manual-policy1-100] transform-set tran1
# Configure IPsec profile profile1 to reference IPsec transform set tran2.
<Sysname> system-view
[Sysname] ipsec transform-set tran2
[Sysname-ipsec-transform-set-prop2] quit
[Sysname] ipsec profile profile1
[Sysname-ipsec-profile-profile1] transform-set tran2
tunnel local
Use tunnel local to configure the local address of an IPsec tunnel.
Use undo tunnel local to remove the configuration.
Syntax
tunnel local ip-address
undo tunnel local
Default
No local address is configured for an IPsec tunnel.
Views
IPsec policy view
Default command level
2: System level
Parameters
ip-address: Specifies the local address for the IPsec tunnel.
Usage guidelines
This command applies to only manual IPsec policies.
The local address, if not configured, will be the address of the interface to which the IPsec policy is
applied.
Examples
# Set the local address of the IPsec tunnel to the address of Loopback 0, 10.0.0.1.