[Contents] [Prev] [Next] [Index] [Report an Error]

ike

Syntax



ike {



policy ike-peer-address {

description policy-description;

encoding (binary | pem);

identity identity-name;

local-certificate certificate-filename;

local-key-pair private-public-key-file;

mode (aggressive | main);

pre-shared-key (ascii-text key | hexadecimal key);

proposals [ proposal-names ];
}





proposal ike-proposal-name {

authentication-algorithm (md5 | sha1); 

authentication-method (dsa-signatures | pre-shared-keys
| rsa-signatures); 

dh-group (group1 | group2); 

encryption-algorithm (3des-cbc | des-cbc); 

lifetime-seconds seconds;
}


}

Hierarchy Level



[edit security]

Release Information

Statement introduced before JUNOS Release 7.4.

Description

(Encryption interface on M-series and T-series routing platforms only) Configure IKE.

The statements are explained separately.

Usage Guidelines

See Configuring an IKE Proposal (Dynamic SAs Only) and Configuring an IKE Policy for Preshared Keys.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

[Contents] [Prev] [Next] [Index] [Report an Error]