Hide Navigation Pane
Show Navigation Pane
Feedback
Download
SHA1
Example: Configuring Global SPI and VPN Monitoring Features (CLI)
In this example, you configure the device to detect and respond five times to a bad IPsec security parameter index (SPI) before deleting the SA and initiating a new one. You also configure the device to monitor the VPN by sending Internet Control Message Protocol (ICMP) requests to the peer every 15 seconds, and to declare the peer unreachable after 15 unsuccessful pings.
To configure global VPN settings in the CLI editor:
user@host# set security ike respond-bad-spi
5user@host# set security ipsec vpn-monitor-options
interval 15 threshold 15
Related Topics
- Junos OS Feature Support Reference for SRX Series and J Series Devices
- Understanding Global SPI and VPN Monitoring Features
- IPsec VPN Configuration Overview
