Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 15

Chapter 8
Chapter 9
Chapter 10
Configuring Digital Certificates
Overview .....................................................................................................213
Digital Certificate Terms and Acronyms ................................................213
Platform Considerations ..............................................................................214
References ..................................................................................................214
IKE Authentication with Digital Certificates .................................................215
Signature Authentication .......................................................................215
Generating Public/Private Key Pairs ......................................................216
Obtaining a Root CA Certificate ............................................................216
Obtaining a Public Key Certificate .........................................................217
Offline Certificate Enrollment .........................................................217
Online Certificate Enrollment .........................................................217
Authenticating the Peer ........................................................................218
Verifying CRLs ......................................................................................218
File Extensions ......................................................................................219
Certificate Chains ..................................................................................219
IKE Authentication Using Public Keys Without Digital Certificates ...............220
Configuration Tasks ..............................................................................220
Public Key Format ................................................................................221
Configuring Digital Certificates Using the Offline Method ............................221
Configuring Digital Certificates Using the Online Method ............................227
Configuring Peer Public Keys Without Digital Certificates ............................232
Monitoring Digital Certificates and Public Keys ...........................................237
Configuring IP Tunnels
Overview .....................................................................................................245
GRE Tunnels .........................................................................................246
DVMRP Tunnels ....................................................................................246
Platform Considerations ..............................................................................246
Module Requirements ...........................................................................246
ERX7xx Models, ERX14xx Models, and the ERX310 Router ...........246
E120 Router and E320 Router ........................................................247
Redundancy and Tunnel Distribution ....................................................247
References ..................................................................................................247
Configuration Tasks .....................................................................................248
Configuration Example .........................................................................250
Configuring IP Tunnels to Forward IP Frames .......................................252
Preventing Recursive Tunnels ...............................................................252
Creating Multicast VPNs Using GRE Tunnels .........................................253
Monitoring IP Tunnels .................................................................................253
Configuring Dynamic IP Tunnels
Dynamic IP Tunnel Overview ......................................................................261
Data MDT for Multicast VPNs and Dynamic IP Tunnels ........................261
Mobile IP and Dynamic IP Tunnels .......................................................262
Table of Contents
213
245
261
xv
Table of Contents