- ike {
-
-
proposal proposal-name {
-
authentication-algorithm (md5 | sha1 | sha-256);
-
authentication-method (dsa-signatures | pre-shared-keys
| rsa-signatures);
-
description description;
-
dh-group (group1 | group2);
-
encryption-algorithm algorithm;
-
lifetime-seconds seconds;
- }
-
-
policy policy-name {
-
description description;
-
local-certificate identifier;
-
-
local-id {
- ipv4_addr [ values ];
- ipv6_addr [ values ];
- key_id [ values ];
- }
-
mode (aggressive | main);
-
pre-shared-key (ascii-text key | hexadecimal key);
- proposals [ proposal-names ];
-
-
remote-id {
- any-remote-id;
- ipv4_addr [ values ];
- ipv6_addr [ values ];
- key_id [ values ];
- }
- }
- }
- [edit services ipsec-vpn]
Statement introduced before JUNOS Release 7.4.
Configure IKE.
The statements are explained separately.
See Configuring an IKE Proposal and Configuring an IKE Policy.
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.