•
See IPSec Service support in
ERX Module Guide, Appendix A, Module Protocol Support
for information about the modules that support IPSec service.
References
For more information about dynamic IPSec subscribers, consult the following resources:
•
The ISAKMP Configuration Method—draft-dukes-ike-mode-cfg-02.txt (March 2002
expiration)
•
Extended Authentication within IKE (XAUTH)—draft-beaulieu-ike-xauth-02.txt (April
2002 expiration
•
Extended Authentication within ISAKMP/Oakley
(XAUTH)—draft-ietf-ipsec-isakmp-xauth-06.txt (May 2000 expiration)
NOTE:
IETF drafts are valid for only 6 months from the date of issuance. They must be
considered as works in progress. Please refer to the IETF Web site at http://www.ietf.org
for the latest drafts.
For additional configuration information, see:
•
“Configuring IPSec” on page 119
•
“Configuring Digital Certificates” on page 205
•
“Configuring IP Tunnels” on page 237
•
JunosE Broadband Access Configuration Guide
Creating an IPSec Tunnel Profile
To create an IPSec tunnel profile, use the
ipsec tunnel profile
command. This command
creates a tunnel profile of the name you specify and accesses the IPSec Tunnel Profile
configuration mode (config-ipsec-tunnel-profile).
ipsec tunnel profile
•
Use to create or configure a tunnel profile for IPSec and accesses the IPSec Tunnel
Profile configuration mode (config-ipsec-tunnel-profile). To create a new profile, you
must specify a profile name.
•
Use the optional
virtual-router
keyword to specify the name of the virtual router on
which you want to create the profile (if you do not specify a virtual router name, the
profile is created on the context virtual router)
•
Example
host1(config)#
ipsec tunnel profile tunnel1
host1(config-ipsec-tunnel-profile)#
•
Use the
no
version to delete the tunnel profile.
•
See ipsec tunnel profile.
173
Copyright © 2010, Juniper Networks, Inc.
Chapter 6: Configuring Dynamic IPSec Subscribers
Содержание JUNOSE 11.2.X IP SERVICES
Страница 6: ...Copyright 2010 Juniper Networks Inc vi...
Страница 8: ...Copyright 2010 Juniper Networks Inc viii JunosE 11 2 x IP Services Configuration Guide...
Страница 18: ...Copyright 2010 Juniper Networks Inc xviii JunosE 11 2 x IP Services Configuration Guide...
Страница 22: ...Copyright 2010 Juniper Networks Inc xxii JunosE 11 2 x IP Services Configuration Guide...
Страница 28: ...Copyright 2010 Juniper Networks Inc 2 JunosE 11 2 x IP Services Configuration Guide...
Страница 116: ...Copyright 2010 Juniper Networks Inc 90 JunosE 11 2 x IP Services Configuration Guide...
Страница 144: ...Copyright 2010 Juniper Networks Inc 118 JunosE 11 2 x IP Services Configuration Guide...
Страница 230: ...Copyright 2010 Juniper Networks Inc 204 JunosE 11 2 x IP Services Configuration Guide...
Страница 262: ...Copyright 2010 Juniper Networks Inc 236 JunosE 11 2 x IP Services Configuration Guide...
Страница 294: ...Copyright 2010 Juniper Networks Inc 268 JunosE 11 2 x IP Services Configuration Guide...
Страница 328: ...Copyright 2010 Juniper Networks Inc 302 JunosE 11 2 x IP Services Configuration Guide...
Страница 345: ...PART 2 Index Index on page 321 319 Copyright 2010 Juniper Networks Inc...
Страница 346: ...Copyright 2010 Juniper Networks Inc 320 JunosE 11 2 x IP Services Configuration Guide...
Страница 356: ...Copyright 2010 Juniper Networks Inc 330 JunosE 11 2 x IP Services Configuration Guide...