tcp-encap
Syntax
tcp-encap {
profile profile-name;
ssl-profile ssl-profile-name;
log ;
}
traceoptions {
file filename {
files number;
match regular-expression;
size maximum-file-size;
(world-readable | no-world-readable);
}
flag (all | configuration | session | tunnel);
level (all | error | info | notice | verbose | warning);
no-remote-trace’
}
Hierarchy Level
[edit security]
Description
Enabling tracing can adversely impact scale and performance and may increase security risk. We strongly recommend using the trace, tracing, or traceoptions commands only under the guidance of a JTAC support engineer. After collecting the debug information, immediately disable tracing to minimize risk and restore normal system performance.
Specify TCP encapsulation operations for a remote access client to a remote access gateway on an SRX Series Firewall to support IPsec messages encapsulated within a TCP connection.
Options
| profile profile-name | Configure a TCP encapsulation profile for a remote access client to a remote access gateway on an SRX Series Firewall to define the data encapsulation operation.
|
||||
| traceoptions | Configure TCP encapsulation tracing options. |
Required Privilege Level
view-level—To view this statement in the configuration.
control-level—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 15.1X49-D80.
Support for the ssl-profile option added in Junos
OS Release 18.1R1.