Table of Contents
Advertisement
The public/private key pair as provided by the system supports the RSA standard
(512, 1024, or 2048 bits).
The public/private key pair is a global system attribute, regardless of how many ISMs
exist in the system. Only one set of keys is available at any given time.
Configuration Tasks
This section explains the steps to configure an IPSec license and IPSec parameters,
create an IPSec tunnel, and define an ISAKMP/IKE policy. The next section contains
configuration examples.
Configuring an IPSec License
By default, and with no IPSec tunnel license, you can configure up to 10 IPSec tunnels
on an ERX router. However, you can purchase licenses that support the following
IPSec tunnel maximums:
The number of additional tunnels is independent of the number of ISMs installed in
the router. However, the router chassis enforces the following tunnel limits:
license ipsec-tunnels
NOTE: Acquire the license from Juniper Networks Customer Services and Support
or from your Juniper Networks sales representative.
1000
2000
4000
8000
16000
32000
SRP 10G – 10,000
SRP 40G – 20,000
Use to specify an IPSec tunnel license.
Example
host1(config)#license ipsec-tunnels license string
Use the no version to disable the license.
See license ipsec-tunnels.
Chapter 5: Configuring IPSec
145
Configuration Tasks
Advertisement
Table of Contents
