583
Default
No local interface or address is specified, and the IKEv2 policy matches any local interface or local
address.
Views
IKEv2 policy view
Predefined user roles
network-admin
Parameters
interface-type interface-number
: Specifies a local interface by its type and number. It can be any
Layer 3 interface.
ipv4-address
: Specifies the IPv4 address of a local interface.
ipv6
ipv6-address
: Specifies the IPv6 address of a local interface.
Usage guidelines
IKEv2 policies with this command configured are looked up before those that do not have this
command configured.
Examples
# Configure the IKEv2 policy
policy1
to match the local address 3.3.3.3.
<Sysname> system-view
[Sysname] ikev2 policy policy1
[Sysname-ikev2-policy-policy1] match local address 3.3.3.3
Related commands
display ikev2 policy
match vrf
match remote
Use
match remote
to configure a peer ID that an IKEv2 profile matches.
Use
undo match remote
to delete a peer ID that an IKEv2 profile matches.
Syntax
match remote
{
certificate
policy-name
|
identity
{
address
{ {
ipv4-address
[
mask
|
mask-length
]
|
range
low-ipv4-address high-ipv4-address
} |
ipv6
{
ipv6-address
[
prefix-length
] |
range
low-ipv6-address high-ipv6-address
} } |
fqdn
fqdn-name
|
email-string
|
key-id
key-id-string
} }
undo match remote
{
certificate
policy-name
|
identity
{
address
{ {
ipv4-address
[
mask
|
mask-length
] |
range
low-ipv4-address high-ipv4-address
} |
ipv6
{
ipv6-address
[
prefix-length
] |
range
low-ipv6-address high-ipv6-address
} } |
fqdn
fqdn-name
|
email-string
|
key-id
key-id-string
} }
Default
No matching peer ID is configured for the IKEv2 profile.
Views
IKEv2 profile view
Predefined user roles
network-admin
