Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


To enable the anti-replay-window-size option, you first need to configure the option for each VPN object or at the global level. You can configure the anti-replay window size in the range of 64 to 8192 (power of 2). If the anti-replay window size is not configured, the window size is 64 by default. If anti-replay-window-size command is configured at both the global and VPN object levels, the configuration on VPN object takes precedence over global configuration.

Note that you can increase the anti-replay window size if your device runs the IPsec VPN service using the IKED process. Devices running the KMD process do not support this feature.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 19.2R1.