tunnel (Security Policies)
Syntax
tunnel {
ipsec-group-vpn group-vpn;
ipsec-vpn vpn-name;
pair-policy pair-policy;
}
Hierarchy Level
[edit security policies from-zone zone-name to-zone zone-name policy policy-name then permit]
Description
Encapsulate outgoing IP packets and decapsulate incoming IP packets.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
-
Statement introduced in Junos OS Release 8.5. The
ipsec-group-vpnoption added in Junos OS Release 10.2. -
SRX400, SRX440, and SRX440-2AC support only route-based VPN using iked. Policy-based VPN is not supported; therefore, any policy-based VPN configuration commands are deprecated and not supported.