Juniper JUNOSE 11.1.X - COMMAND REFERENCE N TO Z 4-6-2010, Command Reference Manual

Page: 229 / 1488

peer ip identity
Syntax
peer ip identity
{ address
ipAddress | range ipRangeLow ipRangeHigh | subnet netAddress netMask }
Release Information
Command introduced in JUNOSe Release 7.3.0.
Description
Overrides the peer identity (phase 2 identity) used for IPSec security association
negotiations. For IPSec negotiations to succeed, the local and peer identities at one
end of the tunnel must match the peer and local identities at the other end
(respectively). The
no version restores the default value, the internal IP address
allocated for the subscriber.
Options
■
ipAddress —IP address used as the peer identity for IPSec security association
negotiations
■
ipRangeLow —Low end of a range used as the peer identity for IPSec security
association negotiations
■
ipRangeHigh —High end of a range used as the peer identity for IPSec security
association negotiations
■
netAddress —IP network address used as the peer identity for IPSec security
association negotiations
■
netMask —IP network mask used as the peer identity for IPSec security association
negotiations
Mode
IPSec Tunnel Profile Configuration
peer ip identity
■ 187
Chapter 4: P Commands