JUNOSe 9.1.x Command Reference Guide N to Z > O-P-Q-R Commands > pfs group

pfs group

Description: 

Configures perfect forward secrecy for connections created with this IPSec transport or tunnel profile by assigning a Diffie-Hellman prime modulus group. The no version removes PFS from the profile.

Syntax: 

pfs group { 1 | 2 | 5 }

no pfs group

• 1—768-bit Diffie-Hellman prime modulus group
• 2—1024-bit Diffie-Hellman prime modulus group
• 5—1536-bit Diffie-Hellman prime modulus group

Mode(s): 

IPSec Transport Profile Configuration, IPSec Tunnel Profile Configuration

Release Information: 

Command introduced before JUNOSe Release 7.1.0.
IPSec Tunnel Profile mode added in JUNOSe Release 7.3.0.