# pfs group

#### Syntax

pfs group { 1 | 2 | 5 }

no pfs group

#### Release Information

Command introduced before JunosE Release 7.1.0.
IPSec Tunnel Profile mode added in JunosE Release 7.3.0.

#### Description

Configures perfect forward secrecy for connections created with this IPSec transport or tunnel profile by assigning a Diffie-Hellman prime modulus group. The no version removes PFS from the profile.

#### Options

- 1—768-bit Diffie-Hellman prime modulus group
- 2—1024-bit Diffie-Hellman prime modulus group
- 5—1536-bit Diffie-Hellman prime modulus group

#### Mode

IPSec Transport Profile Configuration, IPSec Tunnel Profile Configuration