encapsulation-mode

Function

The encapsulation-mode command sets the encapsulation mode for protocol packets.

The undo encapsulation-mode command restores the default encapsulation mode for protocol packets.

By default, the encapsulation mode is tunnel.

Format

encapsulation-mode { transport | tunnel }

undo encapsulation-mode

Parameters

Parameter	Description	Value
transport	Sets the encapsulation mode to transport.	-
tunnel	Sets the encapsulation mode to tunnel.	-

Parameter

Description

Value

transport

Sets the encapsulation mode to transport.

tunnel

Sets the encapsulation mode to tunnel.

Views

IPsec proposal view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ipsec	write

Usage Guidelines

Usage Scenario

You can configure Authentication Header (AH) or Encapsulating Security Payload (ESP) to ensure security. If AH is configured, an AH header is generated; if ESP is configured, an ESP header, an ESP tail, and an ESP authentication field are generated.

Precautions

The encapsulation modes on both IPsec peers must be identical.

Example

# Set the encapsulation mode to transport in the security proposal named prop2.

<HUAWEI> system-view
[~HUAWEI] ipsec proposal prop2
[*HUAWEI-ipsec-proposal-prop2] encapsulation-mode transport