close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

security-association (Junos OS)

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

security-association sa-name {
    dynamic {
        ipsec-policy policy-name;
        replay-window-size (32 | 64); 
    }
    manual {
        direction (inbound | outbound | bi-directional) {
            authentication {
                algorithm (hmac-sha1-96 | hmac-sha2-256); 
                key (ascii-text key | hexadecimal key); 
            }
            auxiliary-spi auxiliary-spi-value;
            encryption {
                algorithm (des-cbc | 3des-cbc); 
                key (ascii-text key | hexadecimal key); 
            }
            protocol ( ah | esp | bundle);
            spi spi-value; 
        }
        mode (tunnel | transport);
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit security ipsec]

Description

Configure an IPsec security association.

Options

sa-name—Name of the security association.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

Note:

You must configure the IPsec keys as hexadecimal keys for maximum key strength with Junos OS in FIPS mode.

arrow_backward PREVIOUS security-association (Junos-FIPS Software)

NEXT arrow_forward security-intelligence (Services)

Junos CLI Reference

ON THIS PAGE

security-association (Junos OS)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

security-association (Junos OS)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch