See the following sections:
- proposal ike-proposal-name {
- authentication-algorithm (md5 | sha1);
- authentication-method (dsa-signatures | pre-shared-keys | rsa-signatures);
- description description;
- dh-group (group1
| group2);
- encryption-algorithm (3des-cbc | des-cbc);
- lifetime-seconds seconds;
- }
- [edit security ike]
Statement introduced before JUNOS Release 7.4.
Define an IKE proposal for a dynamic SA.
ike-proposal-name—Specifies an IKE proposal name.
The remaining statements are explained separately.
See Configuring an IKE Proposal for Dynamic SAs.
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
- proposal ipsec-proposal-name {
- authentication-algorithm (hmac-md5-96 | hmac-sha1-96);
- encryption-algorithm (3des-cbc | des-cbc);
- lifetime-seconds seconds;
- protocol (ah | esp | bundle);
- }
Statement introduced before JUNOS Release 7.4.
Define an IPSec proposal for a dynamic SA.
ipsec-proposal-name—Specifies an IPSec proposal name.
The statements are explained separately.
See Configuring an IPSec Proposal for an ES PIC.
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.