[Contents] [Prev] [Next] [Index] [Report an Error]

direction

See the following sections:

direction (JUNOS Software)

Syntax

direction (inbound | outbound | bidirectional) {
authentication {
algorithm (hmac-md5-96 | hmac-sha1-96);
key (ascii-text key | hexadecimal key);
}
auxiliary-spi auxiliary-spi-value;
encryption {
algorithm (des-cbc | 3des-cbc);
key (ascii-text key | hexadecimal key);
}
protocol (ah | esp | bundle);
spi spi-value;
}

Hierarchy Level

[edit security ipsec security-association sa-name manual]

Release Information

Statement introduced before JUNOS Release 7.4.

Description

Define the direction of IPSec processing.

Options

inbound—Inbound SA.

outbound—Outbound SA.

bidirectional—Bidirectional SA.

Usage Guidelines

See Configuring the Processing Direction.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

direction (JUNOS-FIPS Software)

Syntax

direction (bidirectional | inbound | outbound) {
protocol esp;
spi spi-value;
encryption {
algorithm 3des-cbc;
key ascii-text ascii-text-string;
}
}

Hierarchy Level

[edit security ipsec internal security-association manual]

Description

Establish a manual security association (SA) for internal Routing-Engine-to-Routing-Engine communication.

Options

bidirectional—Apply the same SA values in both directions between Routing Engines.

inbound—Apply these SA properties only to the inbound IPSec tunnel.

outbound—Apply these SA properties only to the outbound IPSec tunnel.

The remaining statements are explained separately.

Usage Guidelines

See Configuring Internal IPSec for JUNOS-FIPS.

Required Privilege Level

Crypto Officer—To view and add this statement in the configuration.

Related Topics

Secure Configuration Guide for Common Criteria and JUNOS-FIPS

[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.