Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Additional Features

We've extended support for the following features to these platforms.

  • Configure concurrent connections (SRX Series devices and vSRX running iked). Configure the number of concurrent connections that the group profile supports using the connections-limit configuration statement at the [edit security ike gateway gateway-name dynamic] hierarchy level. We support this configuration for both IKEv1 and IKEv2. This configuration is applicable only to AutoVPN, ADVPN, dynamic endpoint, and remote access (preshared-key and PKI-based tunnels).

    There are no restrictions on the number of connections accepted if you haven't configured the connections-limit option.

    [See dynamic (Security)].

  • Dynamic routing protocols (MX240, MX480, and MX960 with MX-SPC3, SRX5000 line of devices with SPC3 card and vSRX running iked). We support the exchange of dynamic routing information through IPsec VPN tunnels. You can now enable the dynamic routing protocol, such as OSPF, BGP, BFD, PIM, and RIP on a st0 interface of an IPsec VPN tunnel.

    This feature is supported only if the junos-ike package is installed in your device.

    [See Routing Protocols Support on IPsec VPN Tunnels.]

  • MACsec bounded delay protection (EX4400 and SRX380)

    [See bounded-delay.]