2168 CHAPTER 141: IKE CONFIGURATION COMMANDS
Description Use the local-address command to configure the IP address of the local gateway
in IKE negotiation.
Use the
undo local-address command to remove the configuration.
By default, the master address of the interface referencing the IPSec policy is used
as the local gateway IP address for IKE negotiation. This command is required only
when you want to specify a special address for the local gateway.
Example # Set the IP address of the local gateway to 1.1.1.1.
<Sysname> system-view
[Sysname] ike peer xhy
[Sysname-ike-peer-xhy] local-address 1.1.1.1
nat traversal
Syntax nat traversal
undo nat traversal
View IKE peer view
Parameter None
Description Use the
nat traversal command to enable the NAT traversal function of
IKE/IPSec.
Use the
undo nat traversal command to disable the NAT traversal function of
IKE/IPSec.
By default, the NAT traversal function is disabled.
Example # Enable the NAT traversal function for IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] nat traversal
peer
Syntax peer { multi-subnet | single-subnet }
undo peer
View IKE peer view
Parameter multi-subnet: Sets the subnet type to multiple.
single-subnet: Sets the subnet type to single.