connections (Host VPN)
Syntax
connections {
connection-name {
children {
child-name {
esp-proposal esp-proposal;
local-traffic-selector {
(ipv4-prefix ipv4-prefix | ipv6-prefix ipv6-prefix);
port port;
protocol protocol;
}
mode (transport | tunnel);
rekey-time rekey-time;
remote-traffic-selector {
(ipv4-prefix ipv4-prefix | ipv6-prefix ipv6-prefix);
port port;
protocol protocol;
}
}
}
dpd-delay dpd-delay;
ike-proposal ike-proposal;
local {
id local-id;
}
local-address {
(ipv4 ipv4-address | ipv6 ipv6-address);
}
rekey-time rekey-time;
remote {
id remote-id;
}
}
remote {
id remote-id;
}
remote-address {
(ipv4 ipv4-address | ipv6 ipv6-address);
}
}
Hierarchy Level
[edit security host-vpn]
Description
Configure IPsec connection details. The Internet Key Exchange (IKE) protocol is a component of IPsec used for performing mutual authentication and establishing and maintaining security associations (SAs). Each SA describes a specific negotiated set of parameters to protect traffic for a certain time period for an IPsec VPN.
Options
connection-name |
Specify the name of the IKE SA connection. |
||||||||||||
dpd-delay |
Specify the Dead Peer Detection delay used on the connection. This is the Interval between sending liveness messages.
|
||||||||||||
ike-proposal ike-proposal |
Specify the algorithms to use in negotiating the IKE SA from among the pre-selected combinations available, which represent the encryption algorithm, integrity algorithm, and Diffie Hellman group.
|
||||||||||||
local-address |
Specify the local endpoint’s IPv4 or IPv6 address. |
||||||||||||
rekey-time rekey-time |
Specify how long in seconds before the IKE SA is rekeyed. Actual rekeying occurs slightly sooner than that specified because of rekey randomization.
|
||||||||||||
remote-address |
Specify the remote endpoint’s IPv4 or IPv6 address. |
The remaining statements are explained separately.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Evolved Release 18.3R1.