325
dynamic
: Specifies to use dynamic address resolution for the IPsec remote peer name. If you do not
provide this keyword, the local end has the remote host name resolved only once after you configure
the remote host name.
low-ip-address
: Specifies the IP address of the IPsec remote security gateway. It is the lowest
address in the address range if you want to specify a range of addresses.
high-ip-address
: Specifies the highest address in the address range if you want to specify a range of
addresses.
Usage guidelines
The IP address configured with the
remote-address
command must match the local security
gateway IP address that the remote security gateway uses for IKE negotiation, which is the IP
address configured with the
local-address
command or, if the
local-address
command is not
configured, the primary IP address of the interface to which the policy is applied.
The local end can be the initiator of IKE negotiation if the remote address is a host IP address or a
host name. The local end can only be the responder of IKE negotiation if the remote address is an
address range that the local end can respond to.
If the IP address of the remote address changes frequently, configure the host name of the remote
gateway with the
dynamic
keyword so that the local end can use the up-to-date remote IP address
to initiate IKE negotiation.
Related commands
•
id-type
ip
•
local-address
Examples
# Configure the IP address of the remote security gateway as 10.0.0.1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] remote-address 10.0.0.1
# Configure the host name of the remote gateway as
test.com
, and specify the local end to
dynamically update the remote IP address.
<Sysname> system-view
[Sysname] ike peer peer2
[Sysname-ike-peer-peer2] remote-address test.com dynamic
remote-name
Use
remote-name
to configure the name of the remote gateway.
Use
undo remote-name
to remove the configuration.
Syntax
remote-name
name
undo remote-name
Views
IKE peer view
Default command level
2: System level
