[Contents] [Prev] [Next] [Index] [Report an Error]

tunnel pfs group

Syntax

tunnel pfs group { 1 | 2 | 5 }

no tunnel pfs group

Release Information

Command introduced before JUNOSe Release 7.1.0.

Description

Configures perfect forward secrecy for the IPSec tunnel by assigning a Diffie-Hellman prime modulus group. The no version removes PFS from this tunnel.

Options

1—Assigns a 768-bit Diffie-Hellman prime modulus group
2—Assigns a 1024-bit Diffie-Hellman prime modulus group
5—Assigns a 1536-bit Diffie-Hellman prime modulus group

Interface Configuration

[Contents] [Prev] [Next] [Index] [Report an Error]