Navigation
mode (Services IPsec VPN)
Syntax
mode (aggressive | main);
Hierarchy Level
Release Information
Statement introduced before Junos OS Release 7.4.
Description
Define an IKE policy mode.
Default
main
Options
aggressive—Takes half the number of messages of main mode, has less negotiation power, and does not provide identity protection.
main—Uses six messages, in three peer-to-peer exchanges, to establish the IKE SA. These three steps include the IKE SA negotiation, a Diffie-Hellman exchange, and authentication of the peer. Also provides identity protection.
Required Privilege Level
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.
