Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

ipsec-policy

Syntax

Hierarchy Level

Description

Specifies that matching traffic is checked against rules associated with the specified Group VPN. Exclude and fail-open rules are configured at the [edit security group-vpn member ipsec vpn vpn-name] hierarchy level.

Options

from-zone zone-name

Specify the incoming zone for Group VPN traffic.

to-zone zone-name

Specify the outgoing zone for Group VPN traffic.

The to-zone zone must include the interface configured with the group-vpn-external-interface option at the [edit security group-vpn member ipsec vpn vpn-name] hierarchy level.

ipsec-group-vpn vpn-name

Specify the Group VPN to which the traffic applies. Only one Group VPN can be referenced by a specific from-zone/to-zone pair.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 15.1X49-D30.