ike peer-identity distinguished-name dnString
no ike peer-identity ip address distinguished-name
Command introduced in JUNOSe Release 7.3.0.
Enables this profile to accept logins from users that present an ASN.1-encoded distinguished name as an IKE identity type and the user-provided IKE identity matches each distinguished name field in this profile. The no version removes the peer IKE identity.
IPSec Tunnel Profile Configuration