- ike {
-
- proposal proposal-name {
- authentication-algorithm (md5 | sha1 | sha-256);
- authentication-method (dsa-signatures | pre-shared-keys | rsa-signatures);
- description description;
- dh-group (group1 | group2);
- encryption-algorithm algorithm;
- lifetime-seconds seconds;
- }
-
- policy policy-name {
- description description;
- local-certificate identifier;
- local-id (ipv4_addr ipv4-address | ipv6-addr ipv6-address | key-id identifier);
- mode (aggressive
| main);
- pre-shared-key (ascii-text key | hexadecimal key);
- proposals [ proposal-names ];
-
- remote-id {
- any-remote-id;
- ipv4_addr [ values ];
- ipv6_addr [ values ];
- key_id [ values ];
- }
- }
- }
- [edit services ipsec-vpn]
Statement introduced before JUNOS Release 7.4.
Configure IKE.
The statements are explained separately.
See Configuring IKE Proposals and Configuring IKE Policies.
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.