trusted-ca (IPsec VPN Options)
Syntax
trusted-ca ca-profile-name;
Hierarchy Level
[edit services service-set service-set-name ipsec-vpn-options]
Description
Specify one or more trusted certification authorities (CAs) for IPsec VPN
certificate-based authentication. The CA profiles must be defined under
[edit security pki]. IPsec VPN uses these trusted CAs to
validate peer certificates during tunnel establishment.
Validates peer certificates during IPsec tunnel establishment at hierarchy level
[edit services service-set service-set-name
ipsec-vpn-options].
Options
ca-profile-name—Name of certification authority profile, which is configured
at the [edit security pki] hierarchy level.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 7.5.