default-profile (Juniper Secure Connect)
Syntax
default-profile default-profile;
Hierarchy Level
[edit security remote-access]
Description
Configure default profile. On your security device, you must specify one of the remote-access profiles as the default profile.
Starting in Junos OS Release 23.1R1, we’ve hidden
the default-profile
option at the [edit security
remote-access
] hierarchy level. In releases before Junos OS Release
23.1R1, you use this option to specify one of the remote-access profiles as the
default profile in Juniper Secure Connect. But with changes to the format of
remote-access profile names, we no longer require the
default-profile
option.
We’ve deprecated default-profile
option—rather than immediately
removing it—to provide backward compatibility and a chance to make your existing
configuration conform to the changed configuration. You’ll receive a warning
message if you continue to use the default-profile
option in
your configuration. However existing deployments are not affected if you modify
the current configuration. See profile (Juniper Secure Connect).
In existing deployments, to ensure a smooth transition with this change, we recommend
that you modify the current configuration with profile hr to
ra.example.com/hr or 192.168.1.10/hr at
the [edit
] hierarchy using below commands -
-
user@host# rename security remote-access profile hr to profile ra.example.net/hr
-
user@host# rename edit security remote-access profile hr to profile 192.168.1.10/hr
For new configurations, consider the following scenarios to create a new remote-access profile based on how your end users connect using the Juniper Secure Connect application -
-
If your end users connect using an IP address, specify the IP address in the profile name.
-
If your end users connect using FQDN, specify the FQDN in the profile name.
-
If you need to separate users with different realm values such as hr, append /hr to the IP address or FQDN as follows -
-
[
edit security remote-access profile ra.example.net/hr
] -
[
edit security remote-access profile 192.168.1.10/hr
]
-
Required Privilege Level
security
Release Information
Statement introduced in Junos OS Release 20.3R1
The default-profile option is not available in SRX Series Firewalls starting Junos OS Release 23.1R1.