tunnel-policy (system view)

Function

The tunnel-policy command creates a tunnel policy and displays the tunnel policy view.

The undo tunnel-policy command deletes the specified tunnel policy.

By default, no tunnel policy is created in the system.

Format

tunnel-policy policy-name

undo tunnel-policy policy-name

Parameters

Parameter	Description	Value
policy-name	Displays the name of a tunnel policy.	The value is a string of 1 to 39 case-sensitive characters, spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

By default, a VPN instance selects LSPs without performing load balancing based on the default tunnel policy. If you want to make a change, run the tunnel-policy command to create a tunnel policy.

There are two types of tunnel policies:

Tunnel type prioritizing policy: It specifies the sequence in which different types of tunnels are selected and the number of tunnels taking part in load balancing.
Tunnel binding policy: It binds a tunnel to a destination address. In this manner, the VPN traffic bound for the destination address enters the bound tunnel only, and as a result, QoS is guaranteed for the VPN traffic.

Precautions

If you change the tunnel policy in a VPN instance, VPN services may be interrupted due to a possibility of iteration failures.

Run one of the following commands to perform further configuration on the created tunnel policy:

To configure the tunnel policy as a tunnel type prioritizing policy, run the tunnel select-seq command.
To configure the tunnel policy as a tunnel binding policy, run the tunnel binding command.

The system can select tunnels for a VPN instance based on a tunnel policy only after the tunnel policy is applied to the VPN instance. The mode in which a tunnel policy is applied to a VPN instance varies according to the VPN type.

Example

# Create a tunnel policy named policy1 and enter the tunnel policy view.

<HUAWEI> system-view
[HUAWEI] tunnel-policy policy1
[HUAWEI-tunnel-policy-policy1]