Command Reference Guide

3Com Router 5000 Family and Router 6000 Family tunnel local ● 303
Command Reference
tunnel local
Purpose Use the tunnel local command to set the local address of an ipsec policy.
Use the undo tunnel local command to delete the local address set in the ipsec
policy.
Syntax tunnel local ip-address
undo tunnel local
Parameters ip-address
Local address in dotted decimal format.
Default By default, the local address of an ipsec policy is not configured.
Example Set the local address for the ipsec policy, which is applied at serial 4/1/2 whose IP
address is 10.0.0.1.
[3Com] ipsec policy guangzhou 100 manual
[3Com-ipsec-policy-manual-guangzhou-100] tunnel local 10.0.0.1
[3Com-ipsec-policy-manual-guangzhou-100] quit
[3Com] interface serial 4/1/2
[3Com-Serial4/1/2] ipsec policy guangzhou
View This command can be used in the following views:
■ Manually-Established IPSec Policy view
Description It is not necessary to set a local address for an ipsec policy in isakmp mode, so this
command is invalid in this situation. IKE can automatically obtain the local address
from the interface where this ipsec policy is applied.
As for the ipsec policy in manual mode, it is necessary to set the local address before
the SA can be established. A security tunnel is set up between the local and remote
end, so the local address and remote address must be correctly configured before a
security tunnel can be set up.
Related Commands ■ ipsec policy (Interface view)
■ ipsec policy (System view)
■ proposal
■ sa duration
■ security acl
■ tunnel remote