Navigation
Supported Platforms
mode (IKE)
Syntax
mode (aggressive | main);
Hierarchy Level
[edit security ike policy ike-peer-address]
Release Information
Statement introduced before Junos OS Release 7.4.
Description
Define the IKE policy mode.
 | Note: IKEv2 protocol does not negotiate using mode configuration. |
Default
main
Options
aggressive—Take half the number of messages of main mode, has less negotiation power, and does not provide identity protection.
main—Use six messages, in three peer-to-peer exchanges, to establish the IKE SA. These three steps include the IKE SA negotiation, a Diffie-Hellman exchange, and authentication of the peer. Also provides identity protection.
Required Privilege Level
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.
