firewall source-ip

Function

The firewall source-ip command sets an IP address to be used by the FW to proactively access the Agile Controller server.

The undo firewall source-ip command cancels the setting.

Format

firewall source-ip ip-address

undo firewall source-ip

Parameters

Parameter	Description	Value
ip-address	Specifies the IP address to be used by the FW to proactively access the Agile Controller server.	The value is in dotted decimal notation.

Views

Agile Controller server template view

Default Level

2: Configuration level

Usage Guidelines

By default, no IP address is specified for the FW to proactively access the Agile Controller server (to detect the connectivity of the Agile Controller server or import users/user groups/devices from the Agile Controller server). The FW uses the IP address of the packet outgoing interface to access the Agile Controller server.

If you manually specify a source IP address. Then the FW will use the IP address to access the Agile Controller server. Note that the IP address of the FW configured on the Agile Controller server must be the same as this IP address.

If you run this command multiple times in the same view, only the latest configuration takes effect.

This command cannot be backed up. In hot standby scenarios, you must configure it on both devices before enabling hot standby.

This command does not support virtualization.

Example

# Set the IP address to 10.2.0.1 for the FW to proactively access the Agile Controller server.

<sysname> system-view
[sysname] tsm-server template test
[sysname-tsm-test] firewall source-ip 10.2.0.1