VPN Profiles Overview
You can use the VPN Profile page to create an object that specifies the parameters used in a IPsec VPN. You can configure the Internet Key Exchange (IKE) and IPsec settings in VPN profile.
When a VPN profile is created, Junos Space creates an object in the Junos Space database to represent the VPN profile. You can use this object to create a route-based or policy-based IPsec VPN.
SRX Series devices support the following authentication methods in IKE negotiations for IPsec VPN:
ECDSA signature 256
ECDSA signature 384
The predefined VPN profile is available for both RSA and DSA certificates-based authentication. The PKI certificate list from the device is automatically retrieved during the device discovery.
SRX Series devices support pre-shared key and PKI certificate-based authentication methods in IKE negotiation for IPsec VPNs. The RSA certificate and DSA certicate-based authentication are supported for IKE negotiation. The predefined VPN profile is available with both RSA and DSA certificates-based authentication. The PKI certificate list from the device is automatically retrieved during the device discovery and update-based syslog notifications.