Juniper JUNOSE 11.0.X IP SERVICES Configuration Manual page 260

JUNOSe 11.0.x IP Services Configuration Guide
authentication
ipsec ike-policy-rule
234
Configuring Peer Public Keys Without Digital Certificates
host1(config)#ipsec key pubkey-chain rsa address 192.168.15.5
host1(config-peer-public-key)#
b. Enter the peer public key that you obtained in Step 5.
host1(config-peer-public-key)#key-string "
Enter remainder of text message. End with the character '"'.
30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101
00effc6f d91cbf23 5de66454 420db27a 0bacfc92 63a54e60 587c3e1c 951be4e8
09e7d130 da924040 0ceb797c ddc0df10 dabeb3fc a17145ff 6e7ff977 68ac0698
748d30f4 478252ed 29bf3e4e a6657cc8 cfaf1de4 e7dc2473 33231286 0ecfb15b
4aac505b 255f17ca faf884ca f0402022 5ad6f446 e0f3fb1e d48bbc00 5d4fe9b6
35f88b53 1bf4f07c b168e47b b7143181 5bad4586 0abb7b03 6dba9668 b45e3714
0b64ca82 3a53f69b 357a7d41 f512da37 71901b14 08212648 277f6d38 6bc34164
8c3ac8d4 d9c8baac dc006dac 8c09ce37 44a5d124 b69fec24 df0fc3a8 98e6efc8
5a1d65eb e4b832ba adc26c63 1996fe37 e797ecff 6e2acdd6 0981ef2c 3dd2f506
01020301 0001"
c. (Optional) Verify the peer public key configuration.
host1#show ipsec key pubkey-chain rsa address 192.168.15.5
30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101
00effc6f d91cbf23 5de66454 420db27a 0bacfc92 63a54e60 587c3e1c 951be4e8
09e7d130 da924040 0ceb797c ddc0df10 dabeb3fc a17145ff 6e7ff977 68ac0698
748d30f4 478252ed 29bf3e4e a6657cc8 cfaf1de4 e7dc2473 33231286 0ecfb15b
4aac505b 255f17ca faf884ca f0402022 5ad6f446 e0f3fb1e d48bbc00 5d4fe9b6
35f88b53 1bf4f07c b168e47b b7143181 5bad4586 0abb7b03 6dba9668 b45e3714
0b64ca82 3a53f69b 357a7d41 f512da37 71901b14 08212648 277f6d38 6bc34164
8c3ac8d4 d9c8baac dc006dac 8c09ce37 44a5d124 b69fec24 df0fc3a8 98e6efc8
5a1d65eb e4b832ba adc26c63 1996fe37 e797ecff 6e2acdd6 0981ef2c 3dd2f506
01020301 0001
Use to specify in the ISAKMP/IKE policy that the router uses the RSA signature
authentication method for IKE negotiations.
Example
host1(config-ike-policy)#authentication rsa-sig
Use the no version to restore the default authentication method, preshared keys.
See authentication.
Use to access IPSec IKE Policy Configuration mode to define an ISAKMP/IKE
policy.
For information about how to use this command, see "ipsec ike-policy-rule" on
page 225 .