Technical Documentation

Security Services Configuration Statements

The following table lists the security services configuration statements available at the [edit security] hierarchy level:

Table 1: Security Services Configuration Statements

A-C	D-G	H-M	N-R	S-Z
algorithm	description	internal	path-length	security-association (Junos OS)
authentication	dh-group	ipsec	perfect-forward-secrecy	security-association (Junos-FIPS Software)
authentication-algorithm (IKE)	direction (Junos OS)	identity	pki	spi (Junos OS)
authentication-algorithm (IPsec)	direction (Junos-FIPS Software)	ike	policy (IKE)	spi (Junos-FIPS Software)
authentication-key-chains	dynamic	ldap-url	policy (IPsec)	ssh-known-hosts
authentication-method	enrollment-retry	lifetime-seconds	pre-shared-key	traceoptions
auto-re-enrollment	enrollment-url	local	proposal (IKE)	url
auxiliary-spi	file	local-certificate	proposal (IPsec)	validity-period
ca-identity		local-key-pair	proposals
ca-name		manual (Junos OS)	protocol (Junos OS)
ca-profile		manual (Junos-FIPS Software)	protocol (Junos-FIPS Software)
cache-size		maximum-certificates	re-enroll-trigger-time
cache-timeout-negative		mode (IKE)	re-generate-keypair
certificate-id		mode (IPsec)	refresh-interval
certificates			retry
certification-authority			retry-interval
challenge-password			revocation-check
crl (Encryption Interface)
crl (Adaptive Services Interface)