Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


tunnel (Security Policies)


Hierarchy Level


Encapsulate outgoing IP packets and decapsulate incoming IP packets.


The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 8.5. The ipsec-group-vpn option added in Junos OS Release 10.2.