Juniper JUNOSE 11.2.X IP SERVICES, Configuration Manual

Page: 243 / 356

NOTE: This command replaces “ike crl” on page 215 , which may be removed completely
in a future release.
•
See ipsec crl.
ipsec identity
•
Use to enter IPSec Identity Configuration mode in which you can specify information
that the router uses in certificate requests and during negotiations with its peers.
•
Example
host1(config)# ipsec identity
host1(config-ipsec-identity)#
•
Use the no version to remove the identity configuration.
•
See ipsec identity.
ipsec ike-policy-rule
•
Use to define an ISAKMP/IKE policy.
•
When you enter the command, you include a number that identifies the policy and
assigns a priority to the policy. You can number policies in the range 1–10000, with 1
having the highest priority.
•
Example
host1(config)# ipsec ike-policy-rule 3
host1(config-ike-policy)#
•
Use the no version to remove policies. If you do not include a priority number with the
no version, all policies are removed.
NOTE: This command replaces “ipsec isakmp-policy-rule” on page 217 , which may be
removed completely in a future release.
•
See ipsec ike-policy-rule.
ipsec isakmp-policy-rule
•
Use to define an ISAKMP/IKE policy.
•
When you enter the command, you include a number that identifies the policy and
assigns a priority to the policy. You can number policies in the range 1–10000, with 1
having the highest priority.
•
Example
host1(config)# ipsec isakmp-policy-rule 3
host1(config-ike-policy)#
217 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Digital Certificates