Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Specify the local IKE identity to send in the exchange with the destination peer to establish communication. If you do not configure a local-identity, the device uses the IPv4 or IPv6 address corresponding to the local endpoint by default.

For Network Address Translation Traversal (NAT-T), both local identity and remote identity must be configured.


  • distinguished-name distinguished name—Specify a distinguished name as the identifier for the remote gateway.

  • hostname hostname—Specify identity as a fully qualified domain name (FQDN).

  • inet ip-address—Specify identity as an IPv4 address.

  • inet6 ip-address—Specify identity as an IPv6 address.

  • user-at-hostname e-mail-address—Specify identity as an e-mail address.

  • key-id sring-key-id—Specify key ID in ASCII string.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 8.5. The inet6 option added in Junos OS Release 11.1.