-
perfect-forward-secrecy {
- keys (group1 | group2);
- }
- [edit services ipsec-vpn ipsec policy policy-name]
Statement introduced before JUNOS Release 7.4.
Define Perfect Forward Secrecy (PFS). Creates single-use keys. This statement is optional.
keys—Type of Diffie-Hellman prime modulus group that IKE uses when performing the new Diffie-Hellman exchange. The key can be one of the following:
See Configuring Perfect Forward Secrecy.
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.