R2511-HP MSR Router Series Security Command Reference(V5)

573
Examples
# Configure IPsec policy 10 for the GDOI KS group abc, and then reference ACL 3000 for the IPsec
policy.
<Sysname> system-view
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc] ipsec 10
[Sysname-gdoi-ks-group-abc-ipsec-10] security acl 3000
[Sysname-gdoi-ks-group-abc-ipsec-10]
Related commands
• gdoi ks group
• ipsec
source address
Use source address to specify the source address for packets sent by the KS.
Use undo source address to delete the source address specified for the KS.
Syntax
source address ip-address
undo source address
Default
No source address is specified. The KS uses the source address specified in the first rule of the rekey ACL
as the source address of sent packets.
Views
GDOI KS group view
Default command level
2: System level
Parameters
ip-address: Specifies any valid IPv4 address.
Usage guidelines
Perform this task to specify the source address for GROUPKEY-PUSH protocol packets and redundancy
protocol packets sent by the KS.
Examples
# Specify the source address for the GDOI KS group abc as 11.1.1.1 .
<Sysname> system-view
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc]source address 11.1.1.1
Related commands
• gdoi ks group
• rekey acl
• rekey transport unicast
• redundancy