531
[Sysname-ike-profile-1] exchange-mode main
Related commands
display ike proposal
ike address-group
Use i
ke address-group
to configure an IKE IPv4 address pool for assigning IPv4 addresses to
remote peers.
Use
undo
i
ke address-group
to delete an IKE IPv4 address pool.
Syntax
i
ke address-group
group-name
start-ipv4-address
end-ipv4-address
[
mask
|
mask-length
]
undo
i
ke address-group
group-name
Default
No IKE IPv4 address pools exist.
Views
System view
Predefined user roles
network-admin
Parameters
group-name
: Specifies a name for the IKE IPv4 address pool, a case-insensitive string of 1 to 63
characters.
start-ipv4-address
end-ipv4-address
: Specifies an IPv4 address range. The
start-ipv4-address
argument specifies the start IPv4 address. The
end-ipv4-address
argument specifies the end IPv4
address.
mask
: Specifies the IPv4 address mask.
mask-length
: Specifies the length of the IPv4 address mask.
Usage guidelines
An IKE IPv4 address pool can contain a maximum of 8192 IPv4 addresses.
To modify or delete an address pool, you must delete all IKE SAs and IPsec SAs. Otherwise, the
assigned IPv4 addresses might not be reclaimed.
Examples
# Configure an IKE IPv4 address pool with the name
ipv4group
, address range 1.1.1.1 to 1.1.1.2,
and the mask 255.255.255.0.
<Sysname> system-view
[Sysname] ike address-group ipv4group 1.1.1.1 1.1.1.2 255.255.255.0
# Configure an IKE IPv4 address pool with the name
ipv4group
, address range 1.1.1.1 to 1.1.1.2,
and the mask length 32.
<Sysname> system-view
[Sysname] ike address-group ipv4group 1.1.1.1 1.1.1.2 32
Related commands
aaa authorization
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
