Juniper NFX250 - Ipsec

ipsec
Syntax ipsec {
proposal ipsec-proposal-name {
protocol {
ah;
esp;
}
authentication-algorithm {
hmac-md5-96;
hmac-sha-256-128;
hmac-sha1-96;
}
lifetime-seconds lifetime-in-seconds;
}
policy ipsec-policy-name {
perfect-forward-secrecy {
keys {
group1;
group14;
group2;
group5;
}
}
proposals proposal-name;
}
vpn vpn-name {
ike {
gateway remote-gateway-name;
ipsec-policy ipsec-policy-name;
}
traffic-selector {
traffic-selector-name1 {
local-ip local-traffic-selector-ip-address;
remote-ip remote-traffic-selector-ip-address;
}
traffic-selector-name2 {
local-ip local-traffic-selector-ip-address;
remote-ip remote-traffic-selector-ip-address;
}
}
establish-tunnels immediately;
}
}
Hierarchy Level [ipsec-nm configuration security]
Release Information Statement introduced in Junos OS Release 15.1X53-D47 for the NFX250 Network Services
Platform.
Description IPSec is a suite of related protocols for cryptographically securing communications at
the IP Packet Layer. IPSec also provides methods for the manual and automatic
Copyright © 2017, Juniper Networks, Inc.194
JDM User Guide for NFX250 Network Services Platform