No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

AR500, AR510, and AR530 V200R007

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
local-address

local-address

Function

The local-address command assigns an IP address to the local end of IKE negotiation.

The undo local-address command cancels the configuration.

By default, the system selects an outbound interface according to a route and uses the IP address of the outbound interface as the local IP address.

Format

local-address ip-address

undo local-address

Parameters

Parameter

Description

Value

ip-address

Specifies the IP address of the local end of IKE negotiation.

The value is in dotted decimal notation.

Views

IKE peer view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The local-address command assigns an IP address to the local end of IKE negotiation.

When the local end and remote end establish an IPSec tunnel, the local IP address does not need to be configured during IKE negotiation. By default, the system selects an outbound interface according to a route and uses the IP address of the outbound interface as the local IP address.

  • If the IP address of an interface bound to an IPSec policy is variable or unknown, run the local-address command to specify the IP address of another interface such as a loopback interface as the local IP address.
  • If an interface bound to an IPSec policy is configured with one primary IP address and multiple secondary IP addresses, run the local-address command to specify one IP address as the local IP address.
  • If the local and remote ends have equal-cost routes, run the local-address command to specify the local IP address so that IPSec packets can be sent out from the specified interface.

Precautions

The local-address at the local end must be the same as the remote-address at the remote end.

You do not need to specify local-address for an IKE peer referenced by an IPSec profile. During IKE negotiation, the IPSec profile uses the source addresses of the IPSec tunnel interface.

Example

# Configure an IP address for the local end of IKE negotiation in the IKE peer view.

<Huawei> system-view
[Huawei] ike peer huawei v1
[Huawei-ike-peer-huawei] local-address 10.10.10.1
Translation
Download
Updated: 2019-02-18

Document ID: EDOC1000097293

Views: 35987

Downloads: 101

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next