Additional Features
We've extended support for the following features to these platforms.
-
Configure concurrent connections (SRX Series devices and vSRX running iked). Configure the number of concurrent connections that the group profile supports using the
connections-limit
configuration statement at the[edit security ike gateway gateway-name dynamic]
hierarchy level. We support this configuration for both IKEv1 and IKEv2. This configuration is applicable only to AutoVPN, ADVPN, dynamic endpoint, and remote access (preshared-key and PKI-based tunnels).There are no restrictions on the number of connections accepted if you haven't configured the
connections-limit
option.[See dynamic (Security)].
-
Dynamic routing protocols (MX240, MX480, and MX960 with MX-SPC3, SRX5000 line of devices with SPC3 card and vSRX running iked). We support the exchange of dynamic routing information through IPsec VPN tunnels. You can now enable the dynamic routing protocol, such as OSPF, BGP, BFD, PIM, and RIP on a st0 interface of an IPsec VPN tunnel.
This feature is supported only if the
junos-ike
package is installed in your device. -
MACsec bounded delay protection (EX4400 and SRX380)
[See bounded-delay.]