tunnel remote

Function

The tunnel remote command specifies the remote address of an IPSec tunnel.

The undo tunnel remote command cancels the configuration.

By default, no remote IP address is configured for the IPSec tunnel.

Format

tunnel remote ip-address

undo tunnel remote

Parameters

Parameter	Description	Value
ip-address	Specifies an IPv4 address for the remote end of an IPSec tunnel.	The value is in dotted decimal notation.

Views

Manual IPSec policy view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run this command to specify an end point for an IPSec tunnel.

For a manually created IPSec policy, you must run the tunnel remote ip-address command to configure an IP address for the remote end before you can create an SA. Only after correct IP addresses are configured for the local end (start point) and remote end (end point), an IPSec tunnel can be established between the two ends.

Precautions

If an IPSec policy is created manually, tunnel remote on the local end must be the same as tunnel local on the remote end.

Example

# Set the remote IP address in IPSec policy policy1 to 10.1.1.2.

<sysname> system-view
[sysname] ipsec policy policy1 1 manual
[sysname-ipsec-policy-manual-policy1-1] tunnel remote 10.1.1.2