Navigation
Supported Platforms
Related Documentation
- LN, SRX Series
- Security Configuration Statement Hierarchy
- Additional Information
- MPLS Feature Guide for Security Devices
- AutoVPN Feature Guide for SRX Series Devices
- Dynamic VPN Feature Guide for SRX Series Devices
- Group VPN Feature Guide for Security Devices
- IPsec VPN Feature Guide for Security Devices
- Master Administrator for Logical Systems Feature Guide for Security Devices
[edit security ike] Hierarchy Level
security {ike {gateway gateway-name {address [ip-address-or-hostname];dead-peer-detection {(always-send | optimized | probe-idle-tunnel);interval seconds;threshold number;}dynamic { connections-limit number; (distinguished-name <container container-string> <wildcard wildcard-string> | hostname domain-name | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);ike-user-type (group-ike-id | shared-ike-id); }external-interface external-interface-name;general-ikeid;ike-policy policy-name;local-address (ipv4-address | ipv6-address);local-identity {(distinguished-name | hostname hostname | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);}nat-keepalive seconds;no-nat-traversal;remote-identity {(distinguished-name <container container-string> <wildcard wildcard-string> | hostname hostname | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);}version (v1-only | v2-only);xauth {access-profile profile-name;}}policy policy-name {certificate {local-certificate certificate-id;peer-certificate-type (pkcs7 | x509-signature);}description description;mode (aggressive | main);pre-shared-key (ascii-text key | hexadecimal key);proposal-set (basic | compatible | standard } suiteb-gcm-128 | suiteb-gcm-256);proposals [proposal-name];}proposal proposal-name {authentication-algorithm (md5 | sha-256 | sha-384| sha1);authentication-method (dsa-signatures | ecdsa-signatures-256 | ecdsa-signatures-384 | pre-shared-keys | rsa-signatures);description description;dh-group (group1 | group14 | group19 | group2 | group20 | group24 | group5);encryption-algorithm (3des-cbc | aes-128-cbc | aes-192-cbc | aes-256-cbc | des-cbc);lifetime-seconds seconds;}respond-bad-spi <max-responses>;traceoptions {file {filename;files number;match regular-expression;(no-world-readable | world-readable);size maximum-file-size;}flag flag;no-remote-trace;rate-limit messages-per-second;}}}
Related Documentation
- LN, SRX Series
- Security Configuration Statement Hierarchy
- Additional Information
- MPLS Feature Guide for Security Devices
- AutoVPN Feature Guide for SRX Series Devices
- Dynamic VPN Feature Guide for SRX Series Devices
- Group VPN Feature Guide for Security Devices
- IPsec VPN Feature Guide for Security Devices
- Master Administrator for Logical Systems Feature Guide for Security Devices
Modified: 2016-07-07
Supported Platforms
Related Documentation
- LN, SRX Series
- Security Configuration Statement Hierarchy
- Additional Information
- MPLS Feature Guide for Security Devices
- AutoVPN Feature Guide for SRX Series Devices
- Dynamic VPN Feature Guide for SRX Series Devices
- Group VPN Feature Guide for Security Devices
- IPsec VPN Feature Guide for Security Devices
- Master Administrator for Logical Systems Feature Guide for Security Devices
