[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the Auxiliary Security Parameter Index

When you configure the protocol statement to use the bundle option, the JUNOS software uses the auxiliary SPI for the ESP and the SPI for the AH.

Note: Each manual SA must have a unique SPI and protocol combination.

To configure the auxiliary SPI, include the auxiliary-spi statement at the [edit security ipsec security-association sa-name manual direction (inbound | outbound | bi-directional)] hierarchy level and set the value to an integer between 256 and 16,639:



[edit security ipsec security-association sa-name manual direction (inbound | 
outbound | bidirectional)]

auxiliary-spi auxiliary-spi-value;

[Contents] [Prev] [Next] [Index] [Report an Error]