Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X, Configuration Manual

Page: 171 / 366

The public/private key pair as provided by the system supports the RSA standard
(512, 1024, or 2048 bits).
The public/private key pair is a global system attribute, regardless of how many ISMs
exist in the system. Only one set of keys is available at any given time.
Configuration Tasks
This section explains the steps to configure an IPSec license and IPSec parameters,
create an IPSec tunnel, and define an ISAKMP/IKE policy. The next section contains
configuration examples.
Configuring an IPSec License
By default, and with no IPSec tunnel license, you can configure up to 10 IPSec tunnels
on an ERX router. However, you can purchase licenses that support the following
IPSec tunnel maximums:
■
1000
■
2000
■
4000
■
8000
■
16000
■
32000
The number of additional tunnels is independent of the number of ISMs installed in
the router. However, the router chassis enforces the following tunnel limits:
■
SRP 10G – 10,000
■
SRP 40G – 20,000
license ipsec-tunnels
■
Use to specify an IPSec tunnel license.
NOTE: Acquire the license from Juniper Networks Customer Services and Support
or from your Juniper Networks sales representative.
■
Example
host1(config)# license ipsec-tunnels license string
■
Use the no version to disable the license.
■
See license ipsec-tunnels.
Configuration Tasks
■ 145
Chapter 5: Configuring IPSec