JUNOS-FIPS IPSec security associations (SAs) cannot be configured to use the IPSEC authentication header (AH) only, or to use data encryption standard (DES) encryption.
If you try to load a configuration that includes statements not supported in JUNOS-FIPS, you will see a warning message. For example, if you attempt to configure telnet for remote access:
- [edit]
- system {
-
- services {
- telnet;
- }
- }
You see the following warning:
- [edit system services]
- 'telnet'
- warning: not allowed in JUNOS-FIPS; ignored
The statement will not be added to the loaded configuration. For more information on JUNOS-FIPS limitations, see JUNOS-FIPS Software Environment .