Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    local ip identity

    Syntax

    local ip identity
    { address ipAddress | range ipRangeLow ipRangeHigh | subnet netAddress netMask }

    no local ip identity

    Release Information

    Command introduced in JunosE Release 7.3.0.

    Description

    Overrides the local identity (phase 2 identity) used for IPsec security association negotiations. For IPsec negotiations to succeed, the local and peer identities at one end of the tunnel must match the peer and local identities at the other end (respectively). The no version restores the default value, wildcard network value 0.0.0.0/0.

    Options

    • ipAddress—IP address used as the local identity for IPsec security association negotiations
    • ipRangeLow—Low end of a range used as the local identity for IPsec security association negotiations
    • ipRangeHigh—High end of a range used as the local identity for IPsec security association negotiations
    • netAddress—IP network address used as the local identity for IPsec security association negotiations
    • netMask—IP network mask used as the local identity for IPsec security association negotiations

    Mode

    IPsec Tunnel Profile Configuration

    Published: 2014-08-14