Ipsec Manual Key Configuration Mode; Ipsec Peer Public Key Configuration Mode; Ipsec Transport Profile Configuration Mode - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SYSTEM BASICS CONFIGURATION GUIDE 2010-10-04 Configuration Manual

JunosE 11.3.x System Basics Configuration Guide

IPSec Manual Key Configuration Mode

IPSec Peer Public Key Configuration Mode

IPSec Transport Profile Configuration Mode

92
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
In this mode, you can enter the manual key that a peer uses for authentication during the
tunnel establishment phase.
From the Global Configuration mode, type ipsec key manual pre-share and the
peerIPaddress, and press Enter.
host1(config)#ipsec key manual pre-share 10.10.1.1
host1(config-manual-key)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key Manually specify a key
log Configure logging settings
macro Run a CLI macro
masked-key Enter a masked key (not for manual entry, show config generates)
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
In this mode, you can configure the ISAKMP/IKE public key that a remote peer uses for
RSA authentication during the tunnel establishment phase without the need for a digital
certificate.
From Global Configuration mode, type ipsec key pubkey-chain rsa and either the IP
address or fully qualified domain name of the remote peer, and press Enter.
host1(config)#ipsec key pubkey-chain rsa address 192.168.50.5
host1(config-peer-public-key)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key-string Enter key string
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
In this mode, you can configure an IP Security (IPSec) transport profile, which is used for
Layer 2 Tunneling Protocol (L2TP) over IPSec connections.
From the Global Configuration mode, type ipsec transport profile, the profileName,
virtual-router vrName, ip address ipAddress, and press Enter.
Copyright © 2010, Juniper Networks, Inc.