Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

proposal (Services IKE)

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
proposal proposal-name {
    authentication-algorithm (md5 | sha1 | sha-256);
    authentication-method (ecdsa-signatures-256 | ecdsa-signatures-384 | pre-shared-keys | rsa-signatures);
    description description;
    dh-group  (group1 | group2 | group5 |group14 | group15 | group16 | group19 | group20 | group24);
    encryption-algorithm algorithm;
    lifetime-seconds seconds;
}

Hierarchy Level

content_copy zoom_out_map
[edit services ipsec-vpn ike]

Description

Define an IKE proposal for a dynamic SA.

Note:

In Junos FIPS mode, ECDSA options of the authentication-method statement are not supported in Junos OS Release 17.3R1. Starting in Junos OS Release 17.4R1, ECDSA is supported in Junos FIPS mode.

Options

proposal-name—IKE proposal name.

The remaining statements are explained separately.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

footer-navigation