HP VPN Firewall Appliances VPN Command Reference

50
low-ip-address: IP address of the IPsec remote security gateway. It is the lowest address in the address
range if you want to specify a range of addresses.
high-ip-address: Highest address in the address range if you want to specify a range of addresses.
Usage guidelines
The IP address configured with the remote-address command must match the local security gateway IP
address that the remote security gateway uses for IKE negotiation, which is the IP address configured with
the local-address command or, if the local-address command is not configured, the primary IP address
of the interface to which the policy is applied.
The local end can be the initiator of IKE negotiation if the remote address is a host IP address or a host
name. The local end can only be the responder of IKE negotiation if the remote address is an address
range that the local end can respond to.
If the IP address of the remote address changes frequently, configure the host name of the remote
gateway with the dynamic keyword so that the local end can use the up-to-date remote IP address to
initiate IKE negotiation.
Related commands
• id-type ip
• local-address
Examples
# Configure the IP address of the remote security gateway as 10.0.0.1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] remote-address 10.0.0.1
# Configure the host name of the remote gateway as test.com, and specify the local end to dynamically
update the remote IP address.
<Sysname> system-view
[Sysname] ike peer peer2
[Sysname-ike-peer-peer2] remote-address test.com dynamic
remote-name
Use remote-name to configure the name of the remote gateway.
Use undo remote-name to remove the configuration.
Syntax
remote-name name
undo remote-name
Views
IKE peer view
Default command level
2: System level
Parameters
name: Name of the peer security gateway for IKE negotiation, a string of 1 to 32 characters.