Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

authentication (Security IPsec)

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
authentication {
    algorithm (hmac-sha1-96 | hmac-sha2-256);
    key (ascii-text key | hexadecimal key);
}

Hierarchy Level

content_copy zoom_out_map
[edit security ipsec security-association sa-name manual direction (inbound | outbound | bi-directional)]

Description

Configure IP Security (IPsec) authentication parameters for manual security association (SA).

Note:

The hexadecimal format must be used for the encryption key to be FIPS compliant. The hexadecimal keys provide maximum key strength.

Options

algorithm—Hash algorithm that authenticates packet data. It can be one of the following:

  • hmac-md5-96—Produces a 128-bit digest.

  • hmac-sha1-96—Produces a 160-bit digest.

key—Type of authentication key. It can be one of the following:

  • ascii-text key—ASCII text key. For hmac-md5-96, the key is 16 ASCII characters; for hmac-sha1-96, the key is 20 ASCII characters.

  • hexadecimal key—Hexadecimal key. For hmac-md5-96, the key is 32 hexadecimal characters; for hmac-sha1-96, the key is 40 hexadecimal characters.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

footer-navigation