(Optional) Configuring DHCP over IPSec

Context

In a scenario where DHCP over IPSec is deployed, the IPSec negotiation initiator is a DHCP client. The DHCP server's IP address must be specified on the gateway so that some DHCP broadcast packets can be transmitted using an IPSec tunnel.

Procedure

Run system-view
Enter the system view.
Enter the IPSec policy view or IPSec policy template view. Run the following commands as required.
- Run ipsec policy policy-name seq-number isakmp
  
  An IPSec policy is created and its view is displayed.
- Run ipsec policy-template template-name seq-number
  
  An IPSec policy template is created and its view is displayed.
Run dhcp-server-ip ipv4-address
The DHCP server's IP address is specified.