R2511-HP MSR Router Series Security Command Reference(V5)

267
IKEv2 configuration commands
address
Use address to configure a peer host address or address range. When working as an IKEv2 negotiation
initiator, the local end uses this information to identify a peer.
Use undo address to delete a peer host address or address range.
Syntax
address { ipv4-address [ mask-length ] | ipv6 ipv6-address [ prefix-length ] }
undo address { ipv4-address [ mask-length ] | ipv6 ipv6-address [ prefix-length ] }
Default
An IKEv2 peer has no peer host address or address range.
Views
IKEv2 peer view
Default command level
2: System level
Parameters
ipv4-address: Specifies the IPv4 host address of the IKEv2 peer.
mask-length: Specifies the mask length of the IPv4 address, in the range of 0 to 32.
ipv6 ipv6-address: Specifies the IPv6 host address of the IKEv2 peer.
prefix-length: Specifies the prefix length of the IPv6 address, in the range of 0 to 128.
Examples
# Create an IKEv2 keyring named keyr1.
<Sysname> system-view
[Sysname] ikev2 keyring keyr1
# Create an IKEv2 peer named peer1.
[Sysname-ikev2-keyring-keyr1] peer peer1
# Configure the peer address range 3.3.3.0 for the peer, with the mask 255.255.255.0.
[Sysname-ikev2-keyring-keyr1-peer-peer1] address 3.3.3.0 255.255.255.0
Related commands
peer (IKEv2 keyring view)
authentication (ikev2 profile view)
Use authentication to specify the local authentication method or remote authentication methods.
Use undo authentication to restore the default.