ip address(ike-identity)

Function

The ip address command is used to configure the IP address of the IKE peer that is allowed to access.

The undo ip address command is used to delete the IP address of the IKE peer that is allowed to access.

By default, the IP address of the IKE peer that is allowed to access is not configured.

This command is supported only on the NetEngine 8000 F1A.

ip address ip-address { mask | masklen }

undo ip address [ ip-address { mask | masklen } ]

Parameter	Description	Value
ip-address	Specifies an IP address.	The value is in dotted decimal notation.
mask	Specifies a subnet mask.	The value is in dotted decimal notation.
masklen	Specifies the length of the subnet mask. The IP address with the subnet mask length of 32 can be assigned only to a Loopback interface.	The value is an integer ranging from 0 to 32.

Parameter

Description

Value

ip-address

Specifies an IP address.

The value is in dotted decimal notation.

mask

Specifies a subnet mask.

The value is in dotted decimal notation.

masklen

Specifies the length of the subnet mask.

The IP address with the subnet mask length of 32 can be assigned only to a Loopback interface.

The value is an integer ranging from 0 to 32.

IKE peer filter set view

2: Configuration level

Task Name	Operations
ike	write

You can use the ip address command to filter IKE peer access. If the IP address does not match, IKE can not negotiate.

# Set the IP address of the IKE peer that is allowed to access to 10.102.0.1/24.

<HUAWEI> system-view
[~HUAWEI] ike identity identity1
[*HUAWEI-ike-identity-identity1] ip address 10.102.0.1 24