Table of Contents
Advertisement
JunosE 11.3.x IP Services Configuration Guide
transform-set
Monitoring DVMRP/IPSec, GRE/IPSec, and L2TP/IPSec Tunnels
System Event Logs
show Commands
show dvmrp tunnel
show gre tunnel
294
To have preshared key authentication take place, you must also specify the IKE policy
rule as preshared by entering authentication pre-share in ISAKMP Policy Configuration
mode.
Example
host1(config-ipsec-transport-profile-local)#pre-share-masked
AAAAGAAAAAcAAAACZquq4ABieTUBuNBELSY8b/L3CX/RcPX7
There is no no version. To remove a key, use the no pre-share command.
See pre-share-masked.
Use to specify the transform set(s) that an IPSec transport connection can use to
negotiate a transform algorithm. Each transform in the set provides a different
combination of data authentication and confidentiality.
To display the available transform sets, issue the transform-set ? command.
Example
host1(config-ipsec-transport-profile)#transform-set esp-3des-hmac-sha
Use the no version to reset the transform to the default, esp-3des-hmac-sha.
See transform-set.
This section contains information about troubleshooting and monitoring DVMRP/IPSec,
GRE/IPSec, and L2TP/IPSec tunnels.
To troubleshoot and monitor DVMRP/IPSec, GRE/IPSec, and L2TP/IPSec tunnels, use
the following system event log:
itm—IPSec transport mode
For more information about using event logs, see the JunosE System Event Logging
Reference Guide.
To display profile and connection information for DVMRP/IPSec, GRE/IPSec, and
L2TP/IPSec tunnels, use the following show commands.
Use to display information about DVMRP or GRE tunnels.
If the tunnel is protected by IPSec, the show dvmrp tunnel detail and show gre tunnel
detail commands include a line indicating the IPSec transport interface. The line is not
shown for unsecured tunnels. The following is a partial display. See "Monitoring IP
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
