Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

gateway (Security Group VPN Member IKE)

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
gateway gateway-name {
    ike-policy policy-name;
    local address ip-address;
    local-identity {
        (hostname hostname | inet ip-address | inet6 ipv6-address | user-at-hostname e-mail-address);
    }
    remote-identity {
        (hostname hostname | inet ip-address | user-at-hostname e-mail-address);
    }
    routing-instance routing-instance;
    server-address ip-address;
}

Hierarchy Level

content_copy zoom_out_map
[edit security group-vpn member ike]

Description

Configure IKE gateway for group VPN member. An IKE gateway initiates and terminates network connections between a firewall and a security device.

Options

gateway gateway-name

Name of the gateway.

ike-policy policy-name

Name of the IKE policy.

local address ip-address

Configure the IPv4 address the member uses when accessing the group server.

local-identity local-identity

Specify the local IKE identity to send in the exchange with the destination peer to establish communication.

remote-identity remote-identity

Specify the name of a routing instance. If this is not specified, the default inet.0 routing instance is used.

routing-instance routing-instance

Specify the name of a routing instance. If this is not specified, the default inet.0 routing instance is used.

server-address ip-address

Specify the group server IPv4 address that this member registers through a groupkey-pull exchange. Up to four server IP addresses can be configured. The group member attempts to register with the first configured server. If registration with a configured server is not successful, the group member tries to register with the next configured server.

We recommend that group members only register with sub-servers in a server cluster and not the root-server.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 10.2. Support for the routing-instance option added in Junos OS Release 15.1X49-D30 for vSRX Virtual Firewall.

footer-navigation