F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Command Reference-6PW100

Usage guidelines

The tunnel destination address is the address of the peer interface receiving packets and should be

configured as the source address of the peer tunnel interface.

Automatic tunnel interfaces using the same encapsulation protocol must have different source addresses.

Manual tunnel interfaces using the same encapsulation protocol must have different source and

destination addresses.

The following matrix shows the destination command and firewalls and UTM devices compatibility:

Hardware Command com

atible

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 Yes

Firewall module Yes

U200-A Yes

U200-S No

Examples

# The interface GigabitEthernet 0/1 of Sysname 1 uses the IP address 193.101.1.1 and the interface

GigabitEthernet 0/1 of Sysname 2 uses the IP address 192.100.1.1. Configure the source address

193.101.1.1 and destination address 192.100.1.1 for the tunnel interface of Sysname 1.

<Sysname1> system-view

[Sysname1] interface tunnel 0

[Sysname1-Tunnel0] source 193.101.1.1

[Sysname1-Tunnel0] destination 192.100.1.1

# Configure the source address 192.100.1.1 and destination address 193.101.1.1 for the tunnel interface

of Sysname 2.

<Sysname2> system-view

[Sysname2] interface tunnel 1

[Sysname2-Tunnel1] source 192.100.1.1

[Sysname2-Tunnel1] destination 193.101.1.1

Related commands

• source

• interface tunnel

• display interface tunnel

• display ipv6 interface tunnel

display interface tunnel

Use display interface tunnel to display information about tunnel interfaces, including the source address,

destination address, and tunnel mode.

Syntax

display interface [ tunnel ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ]

display interface tunnel number [ brief ] [ | { begin | exclude | include } regular-expression ]