Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X, Configuration Manual

Page: 184 / 366

hash
Use to set the hash algorithm for the IKE policy:
■
■
md5 —MD5 (HMAC variant)
■
sha —SHA-1 (HMAC variant)
■
Example
host1(config-ike-policy)# hash md5
■
Use the no version to restore the default, sha .
■
See hash.
ipsec ike-policy-rule
ipsec isakmp-policy-rule
NOTE: The command replaces the ipsec isakmp-policy-rule command, which may
be removed completely in a future release.
■
Use to define an IKE policy.
■
When you enter the command, you include a number that identifies the policy
and assigns a priority to the policy. You can number policies in the range
1–10000, with 1 having the highest priority.
■
You can add up to 10 IKE policies per router.
■
Example
host1(config)# ipsec ike-policy-rule 3
host1(config-ike-policy)#
■
Use the no version to remove policies. If you do not include a priority number
with the no version, all policies are removed.
■
See ipsec ike-policy-rule.
■
See ipsec isakmp-policy-rule.
lifetime
■
Use to specify the lifetime of IKE SAs.
■
The range is 60–86400 seconds.
host1(config-ike-policy)# lifetime 360
■
Use the no version to reset the SA lifetime to the default, 28800 seconds.
■
See lifetime.
158 ■
Configuration Tasks
JUNOSe 11.1.x IP Services Configuration Guide