close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

remote-identity

date_range 04-Mar-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
remote-identity {
    distinguished-name {
        container container-string;
        wildcard wildcard-string;
    }
    hostname hostname;
    inet ip-address;
    inet6 ipv6-address;
    key-id;
    user-at-hostname e-mail-address;
}

Hierarchy Level

content_copy zoom_out_map
[edit security ike gateway gateway-name]
[edit system ntp server server-name nts]

Description

Specify the remote IKE identity to exchange with the destination peer to establish communication. If you do not configure a remote-identity, the device uses the IPv4 or IPv6 address corresponding to the remote endpoint by default.

For Network Address Translation Traversal (NAT-T), both remote identity and local identity must be configured. You can use the NTS ‘remote-identity’ configuration to verify server identity.

Options

distinguished-name—Specify identity as the distinguished name (DN) from the certificate. If there is more than one certificate on the device, use the security ike gatewaygateway-namepolicypolicy-name certificate local-certificatecertificate-id.

Optional container and wildcard strings can be specified:
- container container-string—Specify a string for the container.
- wildcard wildcard-string—Specify a string for the wildcard.
hostname hostname—Specify identity as a fully qualified domain name (FQDN).
inet ip-address—Specify identity as an IPv4 address.
inet6 ipv6-address—Specify identity as an IPv6 address.
key-id string-key-id—Specify the key ID in ASCII sring.
user-at-hostname e-mail-address—Specify identity as an e-mail address.

Usage

The command option hostname is the FQDN of the server. This hostname must match the FQDN of server in the Subject Alternative Name field of the local certificate.

For example:

content_copy zoom_out_map
set system ntp server 10.10.10.10 nts remote-identity hostname junos.example.net

You can use the optional parameter distinguished-name, to verify the distinguished name (DN) in the server certificate. You can specify the DN and values in either container string or wildcard string format. If we use container option, the order of the fields in DN and their values must exactly match with the fields in the server certificate. If we use wildcard option, the order of the fields in the DN is not considered.

For example,

content_copy zoom_out_map
set system ntp server 10.10.10.10 nts remote-identity distinguished-name container
                ou=eng, o=example

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 11.4.

arrow_backward PREVIOUS remote-id (VLAN Authentication Username)

NEXT arrow_forward remote-interface-switch

Junos CLI Reference

ON THIS PAGE

remote-identity

Syntax

Hierarchy Level

Description

Options

Usage

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

remote-identity

Syntax

Hierarchy Level

Description

Options

Usage

Required Privilege Level

Release Information

Related Documentation

Stay in touch