source

Function

The source command configures the source address used in TCP connection setup.

The undo source command restores the default setting.

By default, the device uses an outbound interface's IP address as the source IP address used in TCP connection setup.

Format

source { interface interface-type interface-number | ip-address }

undo source

Parameters

Parameter	Description	Value
interface interface-type interface-number	Specifies an interface's IP address as the source IP address used in TCP connection setup. interface-type indicates the interface type. interface-number indicates the interface number.	-
ip-address	Specifies the source address used in TCP connection setup.	The value is in dotted decimal notation.

Parameter

Description

Value

interface interface-type interface-number

Specifies an interface's IP address as the source IP address used in TCP connection setup.

interface-type indicates the interface type.
interface-number indicates the interface number.

ip-address

Specifies the source address used in TCP connection setup.

The value is in dotted decimal notation.

Views

PKI realm view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the device needs to establish a TCP connection with an SCEP or OCSP server, you must run the source command to specify the source IP address used in TCP connection setup.

In the multi-output scenario, if the interfaces for sending and receiving a TCP packet are different, the IP address in the received TCP packet is different from the IP address of the receiving interface. Then the TCP packet is dropped, and the TCP connection is torn down. In this situation, you can run this command to specify the loopback interface address.

Precautions

If the source interface used in TCP connection setup has been specified, the source interface must be a Layer 3 interface with an IP address configured.

Example

# Configure the IP address of VLANIF 100 as the source address used in TCP connection setup.

<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.136.2.25 24
[HUAWEI-Vlanif100] quit
[HUAWEI] pki realm abc
[HUAWEI-pki-realm-abc] source interface vlanif 100