Juniper JUNOSE 11.1.X - COMMAND REFERENCE A TO M 4-9-2010, Command Reference Manual

Page: 1278 / 1506

local ip identity
Syntax
local ip identity
{ address
ipAddress | range ipRangeLow ipRangeHigh | subnet netAddress netMask }
no local ip identity
Release Information
Command introduced in JUNOSe Release 7.3.0.
Description
Overrides the local identity (phase 2 identity) used for IPSec security association
negotiations. For IPSec negotiations to succeed, the local and peer identities at one
end of the tunnel must match the peer and local identities at the other end
(respectively). The
no version restores the default value, wildcard network value
0.0.0.0/0.
Options
■
ipAddress —IP address used as the local identity for IPSec security association
negotiations
■
ipRangeLow— Low end of a range used as the local identity for IPSec security
association negotiations
■
ipRangeHigh— High end of a range used as the local identity for IPSec security
association negotiations
■
netAddress— IP network address used as the local identity for IPSec security
association negotiations
■
netMask— IP network mask used as the local identity for IPSec security association
negotiations
Mode
IPSec Tunnel Profile Configuration
1236 ■
local ip identity
JUNOSe 11.1.x Command Reference Guide A to M