2168 CHAPTER 141: IKE CONFIGURATION COMMANDS

Description Use the local-addresscommand to configure the IP address of the local gateway in IKE negotiation.

Use the undo local-addresscommand to remove the configuration.

By default, the master address of the interface referencing the IPSec policy is used as the local gateway IP address for IKE negotiation. This command is required only when you want to specify a special address for the local gateway.

Example # Set the IP address of the local gateway to 1.1.1.1.

<Sysname> system-view

[Sysname] ike peer xhy

[Sysname-ike-peer-xhy] local-address 1.1.1.1

nat traversal

Syntax nat traversal

undo nat traversal

View IKE peer view

Parameter None

Description Use the nat traversal command to enable the NAT traversal function of IKE/IPSec.

Use the undo nat traversal command to disable the NAT traversal function of

IKE/IPSec.

By default, the NAT traversal function is disabled.

Example # Enable the NAT traversal function for IKE peer peer1.

<Sysname> system-view

[Sysname] ike peer peer1

[Sysname-ike-peer-peer1] nat traversal

peer

Syntax

peer { multi-subnet single-subnet }

 

undo peer

View

IKE peer view

Parameter

multi-subnet: Sets the subnet type to multiple.

 

single-subnet: Sets the subnet type to single.

Page 2168
Image 2168
3Com MSR 30, MSR 50 Nat traversal, Syntax nat traversal Undo nat traversal, Peer multi-subnet single-subnet, Undo peer