Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

gateway (Security Group VPN Member IKE)

Syntax

Hierarchy Level

Description

Configure IKE gateway for group VPN member. An IKE gateway initiates and terminates network connections between a firewall and a security device.

Options

gateway gateway-name

Name of the gateway.

ike-policy policy-name

Name of the IKE policy.

local address ip-address

Configure the IPv4 address the member uses when accessing the group server.

local-identity local-identity

Specify the local IKE identity to send in the exchange with the destination peer to establish communication.

remote-identity remote-identity

Specify the name of a routing instance. If this is not specified, the default inet.0 routing instance is used.

routing-instance routing-instance

Specify the name of a routing instance. If this is not specified, the default inet.0 routing instance is used.

server-address ip-address

Specify the group server IPv4 address that this member registers through a groupkey-pull exchange. Up to four server IP addresses can be configured. The group member attempts to register with the first configured server. If registration with a configured server is not successful, the group member tries to register with the next configured server.

We recommend that group members only register with sub-servers in a server cluster and not the root-server.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 10.2. Support for the routing-instance option added in Junos OS Release 15.1X49-D30 for vSRX Virtual Firewall.