References; Creating An Ipsec Tunnel Profile; Configuring Ipsec; Configuring Digital Certificates - Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual

References

For more information about dynamic IPSec subscribers, consult the following
resources:
NOTE: IETF drafts are valid for only 6 months from the date of issuance. They must
be considered as works in progress. Please refer to the IETF Web site at
http://www.ietf.org for the latest drafts.
For additional configuration information, see:

Creating an IPSec Tunnel Profile

To create an IPSec tunnel profile, use the ipsec tunnel profile command. This
command creates a tunnel profile of the name you specify and accesses the IPSec
Tunnel Profile configuration mode (config-ipsec-tunnel-profile).
ipsec tunnel profile
See IPSec Service support in ERX Module Guide, Table 1, Module Combinations
for detailed module specifications.
See IPSec Service support in ERX Module Guide, Appendix A, Module Protocol
Support for information about the modules that support IPSec service.
The ISAKMP Configuration Method draft-dukes-ike-mode-cfg-02.txt (March
2002 expiration)
Extended Authentication within IKE (XAUTH) draft-beaulieu-ike-xauth-02.txt
(April 2002 expiration
Extended Authentication within ISAKMP/Oakley
(XAUTH) draft-ietf-ipsec-isakmp-xauth-06.txt (May 2000 expiration)
"Configuring IPSec" on page 125
"Configuring Digital Certificates" on page 213
"Configuring IP Tunnels" on page 245
JUNOSe Broadband Access Configuration Guide
Use to create or configure a tunnel profile for IPSec and accesses the IPSec Tunnel
Profile configuration mode (config-ipsec-tunnel-profile). To create a new profile,
you must specify a profile name.
Use the optional virtual-router keyword to specify the name of the virtual router
on which you want to create the profile (if you do not specify a virtual router
name, the profile is created on the context virtual router)
Example
host1(config)#ipsec tunnel profile tunnel1
Chapter 6: Configuring Dynamic IPSec Subscribers
References
181