Juniper JUNOSE 11.2.X IP SERVICES, Configuration Manual

Page: 349 / 356

H
home agent, Mobile IP. See Mobile IP home agent
I
idle timeout period for single-shot tunnels...............284
IKE (Internet Key Exchange)
aggressive mode characteristics............................134
aggressive mode negotiations................................134
authentication without digital
certificates.........................................................212, 224
initiator proposals and policy rules........................135
main mode characteristics.......................................134
overview...........................................................................134
SA negotiation................................................................137
using digital certificates............................................207
IKE commands.......................................................................174
ike local-identity............................................................174
ike peer-identity.............................................................174
IKE message notification type...........................................151
IKE policies...............................................................................135
authentication mode..................................................135
Diffie-Hellman group..................................................135
encryption algorithms
3DES.........................................................................135
DES............................................................................135
hash function
MD5...........................................................................135
SHA-1........................................................................135
IPSec tunnels.................................................................180
lifetime..............................................................................137
priority...............................................................................135
instance, route map..................................................................4
interface commands
interface null....................................................................32
interface tunnel....................................................141, 240
ipsec-transport keyword.................................288
interfaces
NAT, marking...................................................................69
internet community, BGP.....................................................37
Internet Key Exchange.
See IKE
invalid cookies, IPSec............................................................151
IP
managing the routing table........................................47
IP addresses
prefix lists..........................................................................32
prefix trees........................................................................35
ip commands
ip as-path access-list...................................................22
ip bgp-community new-format...............................38
ip community-list...........................................................39
ip prefix-list...............................................................20, 32
ip prefix-tree.............................................................20, 35
ip refresh-route................................................................47
ip route................................................................................32
ip tunnel reassembly....................................................271
IP flow
export................................................................................102
sampling..........................................................................106
IP fragmentation
reassembling for tunnel packets...........................269
ip mobile commands...........................................................318
ip mobile home-agent..............................................308
ip mobile host...............................................................308
ip mobile profile...........................................................308
ip mobile secure foreign-agent..............................308
ip mobile secure host................................................308
See also show ip mobile commands
ip nat commands....................................................................72
address...............................................................................72
ip nat...................................................................................69
ip nat inside source list.................................................73
ip nat inside source static...........................................69
ip nat outside source list..............................................73
ip nat outside source static........................................70
ip nat pool..........................................................................72
ip nat translation.............................................................75
ip nat translation max-entries..................................69
See also show ip nat commands
IP reassembly of tunnel packets....................................269
configuring.......................................................................271
monitoring.......................................................................272
IP security policies.................................................................132
IP tunnels.........................................................................237, 251
configuring.....................................................................240
monitoring............................................................244, 259
IP-in-IP tunnels.............................................................237, 251
IPSec (IP Security)......................................................169, 275
AH.......................................................................................122
AH processing................................................................132
concepts...........................................................................122
configuration
examples.................................................................152
tasks.........................................................................138
configuring
IKE policy................................................................148
IPSec parameters................................................139
tunnels......................................................................141
digital certificates........................................................205
323 Copyright © 2010, Juniper Networks, Inc.
Index