dh-group

Syntax

dh-group (group1 | group2 | group5);

Hierarchy Level

[edit security group-vpn member ike proposal proposal-name][edit security group-vpn server ike proposal proposal-name][edit security ike proposal proposal-name]

Release Information

Statement modified in Release 8.5 of Junos OS. Support for group-vpn hierarchies added in Junos OS Release 10.2.

Description

Specify the IKE Diffie-Hellman group.

Options

dh-group—Type of Diffie-Hellman prime modulus group for performing a Diffie-Hellman authentication key exchange.

group1—768-bit algorithm.
group2—1024-bit algorithm.
group5—1536-bit algorithm.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.