Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    System Basics: Security Services Configuration Guide

    Junos OS supports the IP Security (IPsec) associations and the Internet Key Exchange (IKE) security services features. The IPsec suite provides network layer data security with functions such as authentication of origin, data integrity, confidentiality, replay protection, and nonrepudiation of source. IKE defines mechanisms for key generation and exchange and manages security associations (SAs). An SA is a simplex connection that allows two hosts to communicate with each other securely by means of IPsec. Use the topics in this section to configure essential security services.

            

    Junos OS System Basics Configuration Guide

    Configuration Statements

    [edit security] Hierarchy Level

    algorithm (Authentication Keychain)

    algorithm (Junos FIPS)

    authentication (Security IPsec)

    authentication-algorithm (Security IKE)

    authentication-algorithm (Security IPsec)

    authentication-key-chains

    authentication-method

    auto-re-enrollment

    auxiliary-spi

    ca-identity

    ca-name

    ca-profile

    cache-size

    cache-timeout-negative

    certificate-id

    certificates

    certification-authority

    challenge-password

    crl (Adaptive Services Interface)

    crl (Encryption Interface)

    description (Authentication Keychain)

    description (IKE policy)

    dh-group

    direction (Junos OS)

    direction (Junos-FIPS Software)

    dynamic

    encoding

    encryption (Junos OS)

    encryption (Junos-FIPS Software)

    encryption-algorithm

    enrollment

    enrollment-retry

    enrollment-url

    file

    identity

    ike

    internal

    ipsec (Security)

    key (Authentication Keychain)

    key (Junos FIPS)

    key-chain (Security)

    ldap-url

    lifetime-seconds (Security)

    local

    local-certificate (Security)

    local-key-pair

    manual (Junos OS)

    manual (Junos-FIPS Software)

    maximum-certificates

    mode (IKE)

    mode (IPsec)

    options (Security)

    path-length

    perfect-forward-secrecy (Security)

    pki

    policy (Security IKE)

    policy (Security IPsec)

    pre-shared-key (Security)

    proposal (Security IKE)

    proposal (Security IPsec)

    proposals

    protocol (Junos OS)

    protocol (Junos-FIPS Software)

    re-enroll-trigger-time-percentage

    re-generate-keypair

    refresh-interval

    retry (Adaptive Services Interface)

    retry-interval

    revocation-check

    secret

    security-association (Junos OS)

    security-association (Junos-FIPS Software)

    spi (Junos OS)

    spi (Junos-FIPS Software)

    ssh-known-hosts

    start-time (Authentication Key Transmission)

    tolerance

    traceoptions

    url (Security)

    validity-period

    Security Services Configuration Statements