perfect-forward-secrecy




perfect-forward-secrecy {
keys (group1 | group2);
}



[edit security ipsec policy ipsec-policy-name]

Statement introduced before JUNOS Release 7.4.

(Optional) Define the Perfect Forward Secrecy (PFS) protocol. Creates single-use keys.

keys—Type of Diffie-Hellman prime modulus group that IKE uses when performing the new Diffie-Hellman exchange.
The key can be one of the following:

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.