[Contents] [Prev] [Next] [Index] [Report an Error]

perfect-forward-secrecy

Syntax



perfect-forward-secrecy
keys (group1 | group2 | group5);

Hierarchy Level



[edit security ipsec policy            policy-name         ]

Release Information

Statement modified in Release 8.5 of JUNOS software.

Description

Specify Perfect Forward Secrecy (PFS) as the method that the device uses to generate the encryption key. PFS generates each new encryption key independently from the previous key.

This statement is supported on J-series and SRX-series devices.

Options

group1—Diffie-Hellman Group 1.
group2—Diffie-Hellman Group 2.
group5—Diffie-Hellman Group 5.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

[Contents] [Prev] [Next] [Index] [Report an Error]