< Home

v-gateway public-ip { private | public }

Function

The v-gateway pubilc-ip { private | public } command creates a virtual gateway that shares a public IP address.

The undo v-gateway public-ip command deletes a virtual gateway that shares a public IP address.

Format

v-gateway gateway-name public-ip [ port port-num ] { private [ domain-name1 ] | public [ domain-name2 ] }

undo v-gateway gateway-name

Parameters

Parameter Description Value

v-gateway gateway-name

Name of the virtual gateway

The value is a string of 1 to 15 case-insensitive characters.

public-ip

Virtual gateway that shares a public IP address

-

port port-num

Port number of the virtual gateway

-

private

Exclusive mode virtual gateway

-

domain-name1

Domain name of the exclusive mode virtual gateway

The value is a string of 1 to 127 case-insensitive characters.

public

Sharing mode virtual gateway

-

domain-name2

Domain name of the sharing mode virtual gateway

The value is a string of 1 to 127 case-insensitive characters. The format is public domain name/subdomain name.

Views

System view/virtual system view

Default Level

2: Configuration level

Usage Guidelines

This command is valid only to the virtual gateways that share a public IP address.

Virtual gateways that share a public IP address are classified into the following types:
  • Exclusive type: The exclusive mode virtual gateway accesses the SSL VPN login page using the own domain name and IP:PORT. By default, it uses the public SSL version. If necessary, it uses the public local certificate and cipher suite to establish SSL connections.

    When an exclusive mode virtual gateway has its own domain name, it can access the SSL VPN login page using the domain name.

    When the exclusive mode virtual gateway does not have its own domain name, it can access the SSL VPN login page using IP:PORT. In this scenario, the port number is exclusively occupied by the virtual gateway.

  • Sharing type: The sharing mode virtual gateway accesses the SSL VPN login page using the public IP address or domain name. It uses public local certificate, SSL version, and cipher suite to establish SSL connections.

    When you access services of the sharing mode virtual gateway, you can use the public domain name or subdomain to access the services. Different virtual gateways are distinguished by subdomains.

The configurations of the virtual gateways that share a public IP address must satisfy the following requirements:
  • The 3-tuple (IP address, port number, and domain name) of a virtual gateway must be unique within the integrated system. Otherwise, the virtual gateway fails to be created.
  • The 2-tuple (IP address and port number) of the virtual gateway cannot conflict with that of a virtual gateway that does not share the public IP address. Otherwise, the virtual gateway fails to be created.

Example

# Create sharing mode virtual gateway abc that shares a public IP address, and set the port number to 2345 and domain name to www.example.com.

<sysname> system-view
[sysname] v-gateway abc public-ip port 2345 public www.example.com
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >