R2511-HP MSR Router Series Security Command Reference(V5)

212
loopback number: Specifies a loopback interface by giving its number.
Usage guidelines
The IPsec policy group and loopback interface to be referenced must have been created.
The IPsec policy group to be referenced must have been configured with one or more IPsec policies.
When you configure an IPsec policy group to be a shared source interface policy group, if the IPsec
policy group has already been applied to an interface and the interface has established IPsec SAs, the
IPsec SAs are removed and reestablished.
If the shared source interface has both primary and secondary IP addresses configured, the primary IP
address is used for IKE negotiation. The local IP address configured by using the local-address command
in IKE peer view does not take effect.
Examples
# Configure IPsec policy group map as a shared source interface policy group, binding it to source
interface Loopback 0.
<Sysname> system-view
[Sysname] ipsec policy map 1 isakmp
[Sysname-ipsec-policy-isakmp-map-1] quit
[Sysname] interface loopback 0
[Sysname-LoopBack0] ip address 5.5.5.5 32
[Sysname-LoopBack0] quit
[Sysname] ipsec policy map local-address loopback 0
Related commands
• ipsec policy (system view)
• ipsec policy (interface view)
ipsec policy-template
Use ipsec policy-template to create an IPsec policy template and enter the IPsec policy template view.
Use undo ipsec policy-template to delete the specified IPsec policy templates.
Syntax
ipsec policy-template template-name seq-number
undo ipsec policy-template template-name [ seq-number ]
Default
No IPsec policy template exists.
Views
System view
Default command level
2: System level
Parameters
template-name: Specifies the name for the IPsec policy template, a case-insensitive string of 1 to 41
characters. No minus sign (-) can be included.
seq-number: Specifies the sequence number for the IPsec policy template, in the range of 1 to 65535.