See the following sections:
- proposal ike-proposal-name {
-
authentication-algorithm (md5 | sha1);
-
authentication-method (dsa-signatures | pre-shared-keys
| rsa-signatures);
-
description description;
-
dh-group (group1 | group2);
-
encryption-algorithm (3des-cbc | des-cbc);
-
lifetime-seconds seconds;
- }
- [edit security ike]
Statement introduced before JUNOS Release 7.4.
Define an IKE proposal for a dynamic SA.
ike-proposal-name—Specifies an IKE proposal name.
The remaining statements are explained separately.
See Configuring an IKE Proposal (Dynamic SAs Only).
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
- proposal ipsec-proposal-name {
- authentication-algorithm (hmac-md5-96 | hmac-sha1-96);
-
encryption-algorithm (3des-cbc | des-cbc);
- lifetime-seconds seconds;
- protocol (ah | esp | bundle);
- }
- [edit security ipsec]
Statement introduced before JUNOS Release 7.4.
Define an IPSec proposal for a dynamic SA.
ipsec-proposal-name—Specifies an IPSec proposal name.
The statements are explained separately.
See Configuring an IPSec Proposal (ES PIC).
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.