R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

107
Related commands: ipsec proposal.
Examples
# Configure IPsec proposal prop1 to use AH.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] transform ah
tunnel local
Syntax
tunnel local ip-address
undo tunnel local
View
IPsec policy view
Default level
2: System level
Parameters
ip-address: Local address for the IPsec tunnel.
Description
Use tunnel local to configure the local address of an IPsec tunnel.
Use undo tunnel local to remove the configuration.
By default, no local address is configured for an IPsec tunnel.
This command applies to only manual IPsec policies.
The local address, if not configured, will be the address of the interface to which the IPsec policy is
applied.
Related commands: ipsec policy (system view).
Examples
# Set the local address of the IPsec tunnel to the address of Loopback 0, 10.0.0.1.
<Sysname> system-view
[Sysname] interface loopback 0
[Sysname-LoopBack0] ip address 10.0.0.1 32
[Sysname-LoopBack0] quit
[Sysname] ipsec policy policy1 100 manual
[Sysname-ipsec-policy-manual-policy1-100] tunnel local 10.0.0.1
tunnel remote
Syntax
tunnel remote ip-address
undo tunnel remote [ ip-address ]