No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR500, AR510, and AR530 V200R007 Commands Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ipsec profile (interface view)

ipsec profile (interface view)


The ipsec profile command applies an IPSec profile to an interface.

The undo ipsec profile command unbinds the IPSec profile from an interface.

By default, no IPSec profile is applied to an interface.


ipsec profile profile-name

undo ipsec profile






Specifies the name of an IPSec profile.

The value is an existing IPSec profile name.


Tunnel interface view, Tunnel-Template interface view

Default Level

2: Configuration level

Usage Guidelines


An IPSec profile has been created using the ipsec profile (system view) command.

The encapsulation mode of a tunnel interface has been set to IPSec, GRE, or Multipoint GRE (MGRE).


When the number of IPSec tunnels is larger than 50% of the maximum limit, high CPU usage alarms may be generated in a short period of time after the undo ipsec profile command is run. After all the SAs are cleared, the CPU usage restores to the normal range.

A tunnel interface can be bound to only one IPSec profile. Before binding the tunnel interface to another IPSec profile, run the undo ipsec profile command to unbind the IPSec profile from the tunnel interface.

An IPSec profile is applied only to one tunnel interface. Before applying the IPSec profile to another interface, unbind the IPSec profile from the tunnel interface.


# Bind the IPSec profile profile1 to the tunnel interface.
<Huawei> system-view
[Huawei] interface tunnel 0/0/0
[Huawei-Tunnel0/0/0] tunnel-protocol gre
[Huawei-Tunnel0/0/0] ipsec profile profile1
Updated: 2019-05-29

Document ID: EDOC1000097293

Views: 89722

Downloads: 122

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next