Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All
Related Documentation
- Junos OS Feature Support Reference for SRX Series and J Series Devices
[edit security ike] Hierarchy Level
security {ike {gateway gateway-name {address [ip-address-or-hostname];dead-peer-detection {always-send;interval seconds;threshold number;}dynamic { connections-limit number; (distinguished-name <container container-string> <wildcard wildcard-string> | hostname domain-name | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);ike-user-type (group-ike-id | shared-ike-id); }external-interface external-interface-name;general-ikeid;ike-policy policy-name;local-identity {(distinguished-name | hostname hostname | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);}nat-keepalive seconds;no-nat-traversal;remote-identity {(distinguished-name <container container-string> <wildcard wildcard-string> | hostname hostname | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);}version (v1-only | v2-only);xauth {access-profile profile-name;}}policy policy-name {certificate {local-certificate certificate-id;peer-certificate-type (pkcs7
| x509-signature);}description description;mode (aggressive | main);pre-shared-key (ascii-text key | hexadecimal key);proposal-set (basic | compatible
| standard);proposals [proposal-name];}proposal proposal-name {authentication-algorithm
(md5 | sha-256 | sha1);authentication-method (dsa-signatures
| pre-shared-keys | rsa-signatures);description description;dh-group (group1 | group14
| group2 | group5);encryption-algorithm (3des-cbc
| aes-128-cbc | aes-192-cbc | aes-256-cbc | des-cbc);lifetime-seconds seconds;}respond-bad-spi <max-responses>;traceoptions {file {filename;files number;match regular-expression;size maximum-file-size;(world-readable | no-world-readable);}flag flag;no-remote-trace;rate-limit messages-per-second;}}}
Related Documentation
- Junos OS Feature Support Reference for SRX Series and J Series Devices
