Table of Contents
Advertisement
References
Creating an IPSec Tunnel Profile
ipsec tunnel profile
Copyright © 2010, Juniper Networks, Inc.
See IPSec Service support in ERX Module Guide, Appendix A, Module Protocol Support
for information about the modules that support IPSec service.
For more information about dynamic IPSec subscribers, consult the following resources:
The ISAKMP Configuration Method—draft-dukes-ike-mode-cfg-02.txt (March 2002
expiration)
Extended Authentication within IKE (XAUTH)—draft-beaulieu-ike-xauth-02.txt (April
2002 expiration
Extended Authentication within ISAKMP/Oakley
(XAUTH)—draft-ietf-ipsec-isakmp-xauth-06.txt (May 2000 expiration)
NOTE: IETF drafts are valid for only 6 months from the date of issuance.
They must be considered as works in progress. Please refer to the IETF
Web site at http://www.ietf.org for the latest drafts.
For additional configuration information, see:
"Configuring IPSec" on page 119
"Configuring Digital Certificates" on page 205
"Configuring IP Tunnels" on page 237
JunosE Broadband Access Configuration Guide
To create an IPSec tunnel profile, use the ipsec tunnel profile command. This command
creates a tunnel profile of the name you specify and accesses the IPSec Tunnel Profile
configuration mode (config-ipsec-tunnel-profile).
Use to create or configure a tunnel profile for IPSec and accesses the IPSec Tunnel
Profile configuration mode (config-ipsec-tunnel-profile). To create a new profile, you
must specify a profile name.
Use the optional virtual-router keyword to specify the name of the virtual router on
which you want to create the profile (if you do not specify a virtual router name, the
profile is created on the context virtual router)
Example
host1(config)#ipsec tunnel profile tunnel1
host1(config-ipsec-tunnel-profile)#
Chapter 6: Configuring Dynamic IPSec Subscribers
173
Advertisement
Table of Contents
