Allied Telesis AR2050V, Справочник по командам, Страница: 2730 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2730
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
TUNNEL LOCAL SELECTOR
tunnel local selector
Overview Use this command to specify a local subnet for a traffic selector pair.
Use the no variant of this command to unset the local subnet for the traffic selector
pair so that it matches all sources, i.e. 0.0.0.0/0 or ::/0 for IPv4 and IPv6, respectively.
When local and remote subnets for a traffic selector pair are both unset, the traffic
selector pair is removed.
Syntax tunnel local selector [< traffic-selector-ID >]
{< ipv4-subnet >|< ipv6-subnet >}
no tunnel local selector [< traffic-selector-ID >]
Default When no traffic selector pairs are configured there is an implicit traffic selector pair,
where the local and remote subnets are 0.0.0.0/0 or ::/0 depending on the tunnel
IPsec mode.
Mode Interface configuration
Usage A traffic selector pair is an agreement between IKE peers to permit traffic through
a tunnel if the traffic matches a specified pair of local and remote subnets. When
the local selector is specified but the remote selector is not, the selector pair
implicitly matches all destinations.
Examples To specify an IPv4 destination address as the traffic selector for the traffic to match
for
tunnel0
, use the commands below:
awplus# configure terminal
awplus(config)# interface tunnel0
awplus(config-if)# tunnel source eth1
awplus(config-if)# tunnel destination 10.0.0.2
awplus(config-if)# tunnel local name office
awplus(config-if)# tunnel mode ipsec ipv4
awplus(config-if)# tunnel local selector 192.168.1.0/24
awplus(config-if)# tunnel remote selector 192.168.2.0/24
To configure an additional source and destination traffic selector pair for the traffic
to match for tunnel0, use the commands:
awplus(config-if)# tunnel local selector 5 192.168.1.0/24
awplus(config-if)# tunnel remote selector 5 192.168.2.0/24
Parameter Description
<traffic-selector-ID>
Optional traffic selector ID from 1 through 65535. The default is 1.
<ipv4-subnet>
IPv4 subnet in the format A.B.C.D/M.
<ipv6-subnet>
IPv6 subnet in the format of X:X::X:X/M