local ip identity

Syntax

local ip identity
{ address ipAddress | range ipRangeLow ipRangeHigh | subnet netAddress netMask }

no local ip identity

Release Information

Command introduced in JUNOSe Release 7.3.0.

Description

Overrides the local identity (phase 2 identity) used for IPSec security association negotiations. For IPSec negotiations to succeed, the local and peer identities at one end of the tunnel must match the peer and local identities at the other end (respectively). The no version restores the default value, wildcard network value 0.0.0.0/0.

Options

• ipAddress—IP address used as the local identity for IPSec security association negotiations
• ipRangeLow—Low end of a range used as the local identity for IPSec security association negotiations
• ipRangeHigh—High end of a range used as the local identity for IPSec security association negotiations
• netAddress—IP network address used as the local identity for IPSec security association negotiations
• netMask—IP network mask used as the local identity for IPSec security association negotiations

Mode

IPSec Tunnel Profile Configuration