See the following sections:
- policy policy-name {
-
description description;
-
local-certificate identifier;
-
-
local-id {
- ipv4_addr [ values ];
- ipv6_addr [ values ];
- key_id [ values ];
- }
-
mode (aggressive | main);
-
pre-shared-key (ascii-text key | hexadecimal key);
- proposals [ proposal-names ];
-
-
remote-id {
- any-remote-id;
- ipv4_addr [ values ];
- ipv6_addr [ values ];
- key_id [ values ];
- }
- }
- [edit services ipsec-vpn ike]
Statement introduced before JUNOS Release 7.4.
Define an IKE policy.
policy-name—IKE policy name.
The remaining statements are explained separately.
See Configuring an IKE Policy.
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
- policy policy-name {
-
description description;
-
-
perfect-forward-secrecy {
- keys (group1 | group2);
- }
- proposals [ proposal-names ];
- }
- [edit services ipsec-vpn ipsec]
Statement introduced before JUNOS Release 7.4.
Define an IPSec policy.
policy-name—IPSec policy name.
The remaining statements are explained separately.
See Configuring an IPSec Policy.
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.