Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

dh-group (services)

date_range 31-May-24

Syntax

content_copy zoom_out_map
dh-group (group1 | group2 | group5 |group14 | group15 | group16 | group19 | group20 | group24);

Hierarchy Level

content_copy zoom_out_map
[edit services ipsec-vpn ike proposal proposal-name]

Description

Configure the IKE Diffie-Hellman prime modulus group to use for performing the new Diffie-Hellman exchange.

Options

group1—768-bit.

group2—1024-bit.

group5—1536-bit.

group14—2048-bit.

group15—3072-bit.

group16—4096-bit.

group19—256-bit random Elliptic Curve Group.

group20—384-bit random Elliptic Curve Group.

group24—2048-bit with 256-bit Prime Order Subgroup.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

group15, group16, and group24 options added in Junos OS Release 17.4R1.

footer-navigation