- ike {
-
- policy ike-peer-address {
- description policy-description;
- encoding (binary
| pem);
- identity identity-name;
- local-certificate certificate-filename;
- local-key-pair private-public-key-file;
- mode (aggressive | main);
- pre-shared-key (ascii-text key | hexadecimal key);
- proposals [ proposal-names ];
- }
-
- proposal ike-proposal-name {
- authentication-algorithm (md5 | sha1);
- authentication-method (dsa-signatures | pre-shared-keys | rsa-signatures);
- dh-group (group1
| group2);
- encryption-algorithm (3des-cbc | des-cbc);
- lifetime-seconds seconds;
- }
- }
Statement introduced before JUNOS Release 7.4.
(Encryption interface on M Series and T Series routers only) Configure IKE.
The remaining statements are explained separately.
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.
