mode (IKE)
Syntax
mode (aggressive | main);
Hierarchy Level
[edit security ike policy ike-peer-address]
Description
Define the IKE policy mode.
Note:
IKEv2 protocol does not negotiate using mode configuration.
Default
main
Options
aggressive—Take half the number of messages of main
mode, has less negotiation power, and does not provide identity protection.
main—Use six messages, in three peer-to-peer exchanges, to establish
the IKE SA. These three steps include the IKE SA negotiation, a Diffie-Hellman exchange, and
authentication of the peer. Also provides identity protection.
Required Privilege Level
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.