update host source
Function
The update host source command specifies an interface IP address and VPN instance as the source IP address and VPN instance for online update request packets.
The update host source ip command specifies the source IP address of online update request packets.
The undo update host source command deletes the specified source IP address and VPN instance and interface of online update request packets.
The undo update host source ip command deletes the specified source IP address of online update request packets.
Format
update host source interface-type interface-number
update host source ip ip-address [ vpn-instance vpn-instance ]
undo update host source
undo update host source ip
Parameters
| Parameter | Description | Value |
|---|---|---|
interface-type interface-number |
Specifies the interface type and interface number. |
- |
ip ip-address |
Specifies the source IP address of online update request packets. |
The value is in dotted decimal notation. |
vpn-instance vpn-instance |
Specifies the name of a VPN instance. |
The name is a string of 1 to 31 characters. |
Usage Guidelines
In normal cases, these commands are optional. If the administrator does not configure these commands, the system searches a route based on the IP address of the update server and uses the IP address of the outgoing interface as the source IP address of update request packets.
When update host source interface-type interface-number is configured, the interface must be bound to the corresponding VPN instance name.
When the update host source ip ip-address command is configured, vpn-instance vpn-instance must be specified.
Instructions on these commands are as follows:
The interface specified in the update host source interface-type interface-number command is not necessarily the outgoing interface of update request packets. This command actually specifies the IP address of a specific interface as the source IP address. To send update request packets, the system checks the route information to determine the outgoing interface.
Do not specify an interface that is bound to a virtual system. Otherwise, the update will fail.
If the interface has multiple IP addresses, run the update host source ip ip-address command to set the source IP address of update request packets and ensure that the FW can receive the reply packets. Otherwise, the online update may fail.
The source IP address of the upgrade request packet cannot be the loopback address.
When both update host source interface-type interface-number and update host source ip ip-address [ vpn-instance vpn-instance ] are configured, the system preferentially uses the specified IP address as the source IP address of update request packets. That is, the update host source interface-type interface-number command does not take effect.
This command takes effect for both signature database update and URL remote query. However, the source IP address cannot be bound to a VPN instance for URL remote query. When the FW connects to the Internet through a VPN instance, run the update host source interface-type interface-number command to specify the outgoing interface if you need to use the URL remote query function.
Example
# Set the interface used for online update to GigabitEthernet0/0/1.
<sysname> system-view [sysname] interface GigabitEthernet 0/0/1 [sysname-GigabitEthernet0/0/1] ip address 10.1.1.1 24 [sysname-GigabitEthernet0/0/1] quit [sysname] update host source GigabitEthernet 0/0/1
# Set the source IP address of online update request packets to 10.1.1.1.
<sysname> system-view [sysname] update host source ip 10.1.1.1