Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 184

JUNOSe 11.1.x IP Services Configuration Guide
hash
ipsec ike-policy-rule
ipsec isakmp-policy-rule
NOTE: The command replaces the ipsec isakmp-policy-rule command, which may
be removed completely in a future release.
lifetime
158
Configuration Tasks
Use to set the hash algorithm for the IKE policy:
md5 MD5 (HMAC variant)
sha SHA-1 (HMAC variant)
Example
host1(config-ike-policy)#hash md5
Use the no version to restore the default, sha.
See hash.
Use to define an IKE policy.
When you enter the command, you include a number that identifies the policy
and assigns a priority to the policy. You can number policies in the range
1–10000, with 1 having the highest priority.
You can add up to 10 IKE policies per router.
Example
host1(config)#ipsec ike-policy-rule 3
host1(config-ike-policy)#
Use the no version to remove policies. If you do not include a priority number
with the no version, all policies are removed.
See ipsec ike-policy-rule.
See ipsec isakmp-policy-rule.
Use to specify the lifetime of IKE SAs.
The range is 60–86400 seconds.
host1(config-ike-policy)#lifetime 360
Use the no version to reset the SA lifetime to the default, 28800 seconds.
See lifetime.