Navigation
authentication (Services IPsec VPN)
Syntax
authentication {algorithm (hmac-md5-96 | hmac-sha1-96 | hmac-sha-256-128);key (ascii-text key | hexadecimal key);}
Hierarchy Level
Release Information
Statement introduced before Junos OS Release 7.4.
Description
Configure IPsec authentication parameters for a manual security association (SA).
Options
algorithm—Hash algorithm that authenticates packet data. The algorithm can be one of the following:
- hmac-md5-96—Produces a 128-bit digest.
- hmac-sha1-96—Produces a 160-bit digest.
- hmac-sha-256-128—Produces a 256-bit digest,
truncated to 128 bits.
Note: hmac-sha-256-128 is not supported on MS-MIC and MS-MPC.
key—Type of authentication key. The key can be one of the following:
- ascii-text key—ASCII text key. For hmac-md5-96, the key is 16 ASCII characters; for hmac-sha1-96, the key is 20 ASCII characters.
- hexadecimal key—Hexadecimal key. For hmac-md5-96, the key is 32 hexadecimal characters; for hmac-sha1-96, the key is 40 hexadecimal characters.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
