Use address to specify the IP address or IP address range of an IKEv2 peer.

Use undo address to restore the default.


address { ipv4-address [ mask | mask-length ] | ipv6 ipv6-address [ prefix-length ] }

undo address


The IKEv2 peer's IP address or IP address range is not specified.


IKEv2 peer view

Predefined user roles




ipv4-address: Specifies the IPv4 address of the IKEv2 peer.

mask: Specifies the subnet mask of the IPv4 address.

mask-length: Specifies the subnet mask length of the IPv4 address, in the range of 0 to 32.

ipv6 ipv6-address: Specifies the IPv6 address of the IKEv2 peer.

prefix-length: Specifies the prefix length of the IPv6 address, in the range of 0 to 128.

Usage guidelines

Both the initiator and the responder can look up an IKEv2 peer by IP address in IKEv2 negotiation.

The IP addresses of different IKEv2 peers in the same IKEv2 keychain cannot be the same.


# Create an IKEv2 keychain named key1.

<Sysname> system-view
[Sysname] ikev2 keychain key1

# Create an IKEv2 peer named peer1.

[Sysname-ikev2-keychain-key1] peer peer1

# Specify the IKEv2 peer's IP address with subnet mask

[Sysname-ikev2-keychain-key1-peer-peer1] address

Related commands

ikev2 keychain