Table of Contents
Advertisement
JUNOSe 11.1.x System Basics Configuration Guide
IPSec Peer Public Key Configuration Mode
In this mode, you can configure the ISAKMP/IKE public key that a remote peer uses
for RSA authentication during the tunnel establishment phase without the need for
a digital certificate.
From Global Configuration mode, type ipsec key pubkey-chain rsa and either the
IP address or fully qualified domain name of the remote peer, and press Enter.
host1(config)#ipsec key pubkey-chain rsa address 192.168.50.5
host1(config-peer-public-key)#?
IPSec Transport Profile Configuration Mode
In this mode, you can configure an IP Security (IPSec) transport profile, which is used
for Layer 2 Tunneling Protocol (L2TP) over IPSec connections.
From the Global Configuration mode, type ipsec transport profile, the profileName,
virtual-router vrName, ip address ipAddress, and press Enter.
host1(config)#ipsec transport profile secureL2tp virtual-router default ip address 0.0.0.0
host1(config-ipsec-transport-profile)#?
application
Configure the application type that is protected by the l2tp
default
Set a command to its default(s)
do
Run an exec mode command (alias command run)
exit
Exit from the current command mode
help
Describe the interactive help system
lifetime
Configure the renegotiation time
local
Configure local endpoint of the transport connection
log
Configure logging settings
macro
Run a CLI macro
no
Negate a command or set its default(s)
pfs
Configure perfect forward secrecy
run
Run an exec mode command (alias command do)
sleep
Make the Command Interface pause for a specified duration
transform-set
Configure the transform set used by ipsec transport profile
IPSec Tunnel Profile Configuration Mode
In this mode, you can configure a profile of an IPSec tunnel.
100
Accessing Command Modes
masked-key
Enter a masked key (not for manual entry, show config generates)
no
Negate a command or set its default(s)
run
Run an exec mode command (alias command do)
sleep
Make the Command Interface pause for a specified duration
default
Set a command to its default(s)
do
Run an exec mode command (alias command run)
exit
Exit from the current command mode
help
Describe the interactive help system
key-string
Enter key string
log
Configure logging settings
macro
Run a CLI macro
no
Negate a command or set its default(s)
run
Run an exec mode command (alias command do)
sleep
Make the Command Interface pause for a specified duration
Advertisement
Table of Contents
Troubleshooting
