The update host source command specifies the source IP address of online update request packets.
The undo update host source command deletes the specified source IP address of online update request packets.
By default, the system searches a route based on the IP address of the update center and uses the IP address of the outgoing interface as the source IP address of update request packets.
update host source { interface-type interface-number | ip ip-address [ vpn-instance vpn-instance ] }
undo update host source [ ip ]
Parameter | Description | Value |
---|---|---|
interface-type interface-number | Specifies the IP address of the source interface of online update request packets. |
- |
ip ip-address | Specifies the source IP address of online update request packets. |
The value is in dotted decimal notation. |
vpn-instance vpn-instance | Specifies the name of a VPN instance. |
The name is a string of 1 to 31 characters. |
Usage Scenario
When update host source interface-type interface-number is configured, the interface must be bound to the corresponding VPN instance name.
When the update host source ip ip-address command is configured, vpn-instance vpn-instance must be specified.
Prerequisites
Before running this command, you must run the defence engine enable command to enable the IAE.
Precautions
Instructions on these commands are as follows:
The interface specified in the update host source interface-type interface-number command is not necessarily the outgoing interface of update request packets. This command actually specifies the IP address of a specific interface as the source IP address. To send update request packets, the system checks the route information to determine the outgoing interface.
Do not specify an interface that is bound to a virtual system. Otherwise, the update will fail.
If the interface has multiple IP addresses, run the update host source ip ip-address command to set the source IP address of update request packets and ensure that the device can receive the reply packets. Otherwise, the online update may fail.
When both update host source interface-type interface-number and update host source ip ip-address [ vpn-instance vpn-instance ] are configured, the system preferentially uses the specified IP address as the source IP address of update request packets. That is, the update host source interface-type interface-number command does not take effect.
After configuring this command, the device performs remote URL query within the VPN that the interface belongs to.
# Set the IP address of the interface used for online update to GE0/0/1.
<HUAWEI> system-view [HUAWEI] defence engine enable [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet1/0/0] ip address 10.1.1.1 24 [HUAWEI-GigabitEthernet1/0/0] quit [HUAWEI] update host source gigabitethernet 0/0/1
# Set the source IP address of online update request packets to 10.1.1.1.
<HUAWEI> system-view [HUAWEI] defence engine enable [HUAWEI] update host source ip 10.1.1.1