Table of Contents
Advertisement
JUNOSe 11.0.x Command Reference Guide A to M
local ip address
From L2TP Destination Profile Host Configuration mode:
Syntax
local ip address ipAddress
no local ip address
From IPSec Transport Profile Configuration mode:
[ no ] local ip address transportIpAddress
From IPSec Tunnel Profile Configuration mode:
local ip address transportIpAddress { pre-share keyString
| pre-share-masked maskedKeyString }
no local ip address
Command introduced before JUNOSe Release 7.1.0.
Release Information
IPSec Tunnel Profile Configuration mode added in JUNOSe Release 7.3.0.
From L2TP Destination Profile Host Configuration mode, configures a local IP address
Description
for use with a remote host. The no version removes the local IP address from use
with a remote host.
From IPSec Transport Profile Configuration mode, specifies the local endpoint of the
IPSec transport connection. It also enters Local IPSec Transport Profile Configuration
mode. The no version deletes the local IP address.
From IPSec Tunnel Profile Configuration mode, specifies the given local IP address
as a server address. The router continues to monitor UDP port 500 for incoming user
login requests (that is, IKE source address negotiations). When using global preshared
keys, consider the following points:
The no version causes the router to stop monitoring UDP port 500 for user requests
and removes any preshared key associations with the local IP address.
1216
local ip address
Global preshared keys enable a group of users to share a single authentication
key. Using a shared key for a group of users simplifies the administrative job of
setting up keys. However, changing or removing a preshared key for one user
(for security reasons) affects other users with the same key.
Specific keys for individual users take precedence over global keys assigned to
the same user. In other words, if a user has both an assigned specific key and a
global key that user must use the specific key or authentication fails.
Avoid specifying the same local endpoint and virtual router in the same profile.
Local endpoint and virtual router values override each other. The last value set
in the profile is the value used.
Advertisement
Table of Contents
