Juniper JUNOSE 11.3, Configuration Manual

Page: 121 / 632

From Global Configuration mode, type ipsec ca identity , and press Enter.
host1(config)# ipsec ca identity
host1(config-ca-identity)#
?
crl Certificate Revocation List checking
default Set a command to its default(s)
do Run an exec mode command (alias command run)
enrollment Configure enrollment parameters
exit Exit from the current command mode
help Describe the interactive help system
issuer-identifier issuer identifier
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
root Specify root proxy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
IPSec Identity Configuration Mode
In this mode, you can specify the information that the system uses in offline certificate
requests and during negotiations with its peers.
From Global Configuration mode, type ipsec identity , and press Enter.
host1(config)# ipsec identity
host1(config-ipsec-identity)# ?
common-name Common Name
country Country name
default Set a command to its default(s)
do Run an exec mode command (alias command run)
domain-name Domain name
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
organization Organization name
sleep Make the Command Interface pause for a specified duration
IPSec IKE Policy Configuration Mode
In this mode, you can create an IKE policy, which is used during IKE phase 1 negotiation.
From the Global Configuration mode, type ipsec ike-policy-rule and the policyNumber ,
and press Enter.
host1(config)# ipsec ike-policy-rule 10
host1(config-ike-policy)# ?
aggressive-mode Allows aggressive mode negotiation for the tunnel
authentication Configure the authentication method
default Set a command to its default(s)
do Run an exec mode command (alias command run)
encryption Configure the encryption algorithm within an IKE policy
exit Exit from the current command mode
group Configure the Diffie-Hellman group identifier
hash Configure the hash algorithm within an IKE policy
help Describe the interactive help system
lifetime Configure the time an SA will live before expiration
log Configure logging settings
91 Copyright © 2010, Juniper Networks, Inc.
Chapter 2: Command-Line Interface