You can specify one or more trusted certification authorities by including the trusted-ca statement:
-
trusted-ca [ ca-profile-name ];
When you configure public key infrastructure (PKI) digital certificates in the IPSec configuration, each service set can have its own set of trusted certification authorities. The names you specify for the trusted-ca statement must match profiles configured at the [edit security pki] hierarchy level; for more information, see the JUNOS System Basics Configuration Guide. For more information about IPSec digital certificate configuration, see Configuring IPSec Service Rules.