See the following sections:
- ipsec-vpn {
- mss
value ;
- }
- [edit security flow tcp-mss]
Statement introduced in Release 8.5 of JUNOS software.
Specify the TCP maximum segment size (TCP MSS) for the TCP packets that are about to go into an IPsec VPN tunnel. This value overrides the value specified in the all-tcp-mss statement.
This statement is supported on J-series and SRX-series devices.
mss value —TCP MSS value for TCP packets entering an IPsec VPN tunnel. Value is optional.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- ipsec-vpn
vpn-name
;
- [edit security policies from-zone
zone-name
to-zone
zone-name
policy
policy-name
then permit tunnel]
Statement introduced in Release 8.5 of JUNOS software.
Define IPsec name for VPN.
This statement is supported on J-series and SRX-series devices.
vpn-name —Name of the IPsec.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.