[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the Preshared Key for an IKE Policy

IKE policy preshared keys authenticate peers. You must manually configure a preshared key, which must match that of its peer. The preshared key can be an ASCII text (alphanumeric) key or a hexadecimal key.

A local certificate is an alternative to the preshared key. Commit will fail if either pre-shared key or local certificate is not configured.

To configure an IKE policy preshared key, include the pre-shared-key statement at the [edit security ike policy ike-peer-address] hierarchy level:



[edit security ike policy ike-peer-address ]

pre-shared-key (ascii-text key | hexadecimal key );

[Contents] [Prev] [Next] [Index] [Report an Error]