link-quality-detection source destination

Function

The link-quality-detection source destination command sets the source and destination addresses for link quality detection packets.

The undo link-quality-detection source destination command cancels the settings.

The virtual system does not support this command.

Format

link-quality-detection source source-address destination destination-address

undo link-quality-detection source source-address destination destination-address

Parameters

Parameter	Description	Value
source-address	Specifies the source address of a link quality detection packet.	The value is in dotted decimal notation.
destination-address	Specifies the destination address of a link quality detection packet.	The value is in dotted decimal notation.

Views

IPSec intelligent link selection view

Default Level

2: Configuration level

Usage Guidelines

Quality of IPSec links is detected by sending ICMP packets. source-address can be any address as long as the remote device and source-address are reachable to each other. The destination-address of probe packets may be the address of a device on the peer private network. When there is only one peer address, the destination-address of probe packets may be an interface IP address of the peer gateway.

After you specify the source and destination addresses for link quality detection packets using the link-quality-detection source source-address destination destination-address command, the FW will automatically add the following rule to the ACL referenced by the IPSec policy so that the link quality detection packets can match the ACL.

rule 4294967294 permit icmp source source-address 0 destination destination-address 0 description Used for IPSec smart link

If link quality detection packets match an existing ACL rule on the FW, the FW will not add the preceding ACL rule.

The following ACL rule needs to be manually added to the remote device so that the remote device can receive and respond to the link quality detection packets from the FW:

rule permit icmp source destination-address 0 destination source-address 0

If the link quality detection packet and its response packet can match an existing ACL rule on the remote device, the preceding ACL rule does not need to be added.

If no source or destination address is configured for link quality detection packets, the FW will use local-address and remote-address specified in the link command as the source and destination addresses of the packets respectively.

Example

# Set the source address to 10.3.1.10 and destination address to 10.3.2.10 for link quality detection packets.

<sysname> system-view
[sysname] ipsec smart-link profile profile1
[sysname-ipsec-smart-link-profile-profile1] link-quality-detection source 10.3.1.10 destination 10.3.2.10