ipsec
Syntax
ipsec {
proposal ipsec-proposal-name {
protocol {
ah;
esp;
}
authentication-algorithm {
hmac-md5-96;
hmac-sha-256-128;
hmac-sha1-96;
}
lifetime-seconds lifetime-in-seconds;
}
policy ipsec-policy-name {
perfect-forward-secrecy {
keys {
group1;
group14;
group2;
group5;
}
}
proposals proposal-name;
}
vpn vpn-name {
ike {
gateway remote-gateway-name;
ipsec-policy ipsec-policy-name;
}
traffic-selector {
traffic-selector-name1 {
local-ip local-traffic-selector-ip-address;
remote-ip remote-traffic-selector-ip-address;
}
traffic-selector-name2 {
local-ip local-traffic-selector-ip-address;
remote-ip remote-traffic-selector-ip-address;
}
}
establish-tunnels immediately;
}
}
Hierarchy Level
[ipsec-nm configuration security]
Release Information
Statement introduced in Junos OS Release 15.1X53-D47 for the NFX250 Network Services Platform.
Description
IPSec is a suite of related protocols for cryptographically securing communications at the IP Packet Layer. IPSec also provides methods for the manual and automatic negotiation of security associations (SAs) and key distribution, all the attributes for which are gathered in a domain of interpretation (DOI). The IPSec DOI is a document containing definitions for all the security parameters and attributes required for SA and IKE negotiations. See RFC 2407 and RFC 2408 for more information. For more information, see Configuring IPSec.
Options
proposal ipsec-proposal-name—Name of the IPSec proposal.
lifetime-seconds lifetime-in-seconds—Lifetime in seconds.
policy ipsec-policy-name—Name of the IPSec policy.
gateway remote-gateway-name—Name of the remote gateway.
Required Privilege Level
routing—To view this statement in the
configuration.
routing-control—To add this statement
to the configuration.