Juniper NFX250 - Ipsec-Nm

ipsec-nm
Syntax ipsec-nm {
configuration {
security {
ike {
proposal ike-proposal-name {
authentication-method {
pre-shared-keys;
}
authentication-algorithm {
md5;
sha-256;
sha-384;
sha1;
}
dh-group {
group1;
group14;
group2;
group5;
}
encryption-algorithm {
3des-cbc;
aes-128-cbc;
aes-192-cbc;
aes-256-cbc;
des-cbc;
}
lifetime-seconds lifetime-in-seconds;
}
policy ike-policy-name {
mode {
aggressive;
}
proposals proposal-name;
pre-shared-key {
ascii-text;
hexadecimal;
}
}
gateway gateway-name {
ike-policy ike-policy-name;
address address-or-hostname-of-peer;
dead-peer-detection {
always-send;
interval interval-in-seconds;
threshold maximum-number-of-DPD-retransmissions;
}
external-interface external-interface;
local-address local-ip-address;
version {
v1-only;
}
Copyright © 2017, Juniper Networks, Inc.188
JDM User Guide for NFX250 Network Services Platform