See the following sections:
- gateway
gateway-name
{
- address [(
ip-address
|
hostname
)] |
-
- dead-peer-detection {
- always-send;
- interval
seconds
;
- threshold
number
;
- }
-
- dynamic {
- connections-limit
number
;
-
-
distinguished-name {
-
container
container-string
;
-
wildcard
wildcard-string
;
- }
-
hostname
domain-name
;
-
ike-user-type (group-ike-id | shared-ike-id);
-
inet
ip-address
;
-
user-at-hostname
user-at-hostname
;
- }
- external-interface
external-interface-name
;
- ike-policy
name
;
- local-identity (hostname
hostname
| inet
ipv4-ip-address
|
- user-at-hostname
e-mail-address
| distinguished-name
string
);
- nat-keepalive
seconds
;
- no-nat-traversal;
-
- xauth {
- access-profile
profile-name
;
- }
- }
- [edit security ike]
Statement introduced in Release 8.5 of JUNOS software.
Configure an IKE gateway.
This statement is supported on J-series and SRX-series devices.
gateway-name —Name of the gateway.
The remaining statements are explained separately.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- gateway
gateway-name
;
- [edit security ipsec vpn
vpn-name
ike]
Statement introduced in Release 8.5 of JUNOS software.
Specify the remote gateway.
This statement is supported on J-series and SRX-series devices.
gateway-name —Name of the gateway.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- gateway
ip-address ;
- [edit security ipsec vpn vpn-name manual]
Statement introduced in Release 8.5 of JUNOS software.
For a manual security association, specify the IP address of the peer.
This statement is supported on J-series and SRX-series devices.
ip-address —IP address of the peer.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.