2-68 Command Line Interface Commands ReferenceUnprotected Services Configuration CommandsNote: These commands are supported beginning with Firmware Version 8.7.4.When using an IPSec force-all tunnel, Unprotected Services supports router-generated packets with a source IPaddress outside the local member range. It works by applying a source address to an internally-generatedrouter service, and specifies whether the service should not be routed by default over the force-all IPSec tunnel.This permits supporting multiple authentication profles with multiple tunnels, as well as supportingauthentication profiles that point to a RADIUS server on the LAN interface. Other applications such asTACACS+, SNMP, syslog, NTP and heartbeat are not forced over the tunnel.service interface [ ip_address | cp | ethernet ] [ number ]show service interface [ cp | ethernet ] [ number ]no service interfaceThese commands allow you to specify, show, or disable the application of a source address to an internallygenerated router service, such that the service should not be routed by default over a force-all IPSec tunnel.Applicable internally-generated router services are: RADIUS, TACACS+, SNMP, syslog, NTP and heartbeat.■ interface specifies from where the traffic is to be sourced.■ For cp or ethernet, the router will look up its interface address, reducing the chance of error.■ If you enter an ip_address that is not a local interface address, the service may either fail to function or therouter will override the invalid address. It will then use the interface with a route to the server for theservice.If no is used with the commands, the value goes back to the default 0.0.0.0 and no.Note: Only primary Ethernet interfaces are supported; ALANs are not supported.Examples:remote-server interface 100.110.112.113remote-server interface cp 3remote-server interface ethernet 0remote-server unprotected yesUnprotected Services Configuration Commandsservice interface [ ip_address | cp | ethernet ] [ number ]show service interface [ cp | ethernet ] [ number ]no service interfaceservice unprotected [ yes | no ]show service unprotectedno service unprotected
