dynamic-vpn
Syntax
dynamic-vpn {
access-profile profile-name;
clients configuration-name {
ipsec-vpn vpn-name;
remote-exceptions ip-address/mask;
remote-protected-resources ip-address/mask;
user username;
user-groups user-group-name;
}
config-check;
force-upgrade;
interface;
traceoptions {
file <filename> <files files> <match match> <size size> <(world-readable | no-world-readable)>;
flag {
all;
}
level (all | error | info | notice | verbose | warning);
no-remote-trace;
}
}
Hierarchy Level
[edit security]
Description
Configure the dynamic VPN feature. The dynamic VPN feature simplifies remote access by enabling users to create IPsec VPN tunnels without having to manually configure settings on their PCs or laptops. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices.
In Junos OS Release 21.4R1, we’ve deprecated the dynamic-vpn
configuration statement and we might remove it completely in a future release.
Options
| access-profile | Specify the access profile to use for Extended Authentication for remote users trying to download the Access Manager. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices. |
| clients | Create a client configuration for the dynamic VPN feature. |
| config-check | Enable extra dynamic VPN configuration checking. If you include this statement in your configuration, it is automatically enabled. If the statement is not present in your configuration, the configuration check option is not enabled. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices. |
| force-upgrade | Force upgrade.the dynamic vpn. |
| interface | Specify a list of interfaces to set the interfaces that allow access to dynamic VPN, separated by spaces. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices. |
| traceoptions | Configure dynamic VPN tracing options. |
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release Release 9.5.
config-check and interface options introduced
in Junos OS Release 12.1X44-D10.