peer ip identity

Syntax

peer ip identity
{ address ipAddress | range ipRangeLow ipRangeHigh | subnet netAddress netMask }

no peer ip identity

Release Information

Command introduced in JunosE Release 7.3.0.

Description

Overrides the peer identity (phase 2 identity) used for IPSec security association negotiations. For IPSec negotiations to succeed, the local and peer identities at one end of the tunnel must match the peer and local identities at the other end (respectively). The no version restores the default value, the internal IP address allocated for the subscriber.

Options

• ipAddress—IP address used as the peer identity for IPSec security association negotiations
• ipRangeLow—Low end of a range used as the peer identity for IPSec security association negotiations
• ipRangeHigh—High end of a range used as the peer identity for IPSec security association negotiations
• netAddress—IP network address used as the peer identity for IPSec security association negotiations
• netMask—IP network mask used as the peer identity for IPSec security association negotiations

Mode

IPSec Tunnel Profile Configuration