R2511-HP MSR Router Series Security Command Reference(V5)

298
Related commands
• display ikev2 profile
• identity local
match address local
Use match address local to specify a local address used for IKEv2 policy matching.
Use undo match address local to delete a local address used for IKEv2 policy matching.
Syntax
match address local { ipv4-address | ipv6 ipv6-address }
undo match address local { ipv4-address | ipv6 ipv6-address }
Default
No local address is used for IKEv2 policy matching, and the policy matches any local address.
Views
IKEv2 policy view
Default command level
2: System level
Parameters
ipv4-address: Specifies the local IPv4 address for IKEv2 policy matching.
ipv6 ipv6-address: Specifies the local IPv6 address for IKEv2 policy matching.
Usage guidelines
During the IKE_SA_INIT exchange, IKEv2 searches for an IKEv2 policy identified by the IP address of the
local security gateway, and uses an IKEv2 proposal of the policy.
Examples
# Use local address 3.3.3.3 as the address for IKEv2 policy matching.
<Sysname> system-view
[Sysname] ikev2 policy policy1
[Sysname-ikev2-policy-policy1] match address local 3.3.3.3
Related commands
display ikev2 policy
nat keepalive
Use nat keepalive to set the IKEv2 NAT keepalive interval.
Use undo nat keepalive to restore the default.
Syntax
nat keepalive seconds
undo nat keepalive
Default
The IKEv2 NAT keepalive interval is 10 seconds.