establish-tunnels

Syntax

establish-tunnels (immediately | on-traffic);

Hierarchy Level

[edit security ipsec vpn vpn-name]

Release Information

Statement introduced in Release 8.5 of Junos OS.

Description

Specify when IKE is activated: immediately after VPN information is configured and configuration changes are committed, or only when data traffic flows. In the second case, IKE needs to be negotiated with the peer gateway.

Options

immediately—IKE is activated immediately after VPN configuration and configuration changes are committed.

on-traffic—IKE is activated only when data traffic flows and must to be negotiated.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.