<mode>
Defines an IPsec profile authentication mode.
Syntax set security vpn ipsec profile profile-name authentication mode mode delete security vpn ipsec profile profile-name authentication mode show security vpn ipsec profile profile-name authentication mode Parameters profile-name
Multi-node. The name of the IPsec configuration profile.
You can define more than one IPsec profile by creating multiple profile configuration nodes.
mode
The authentication method to be used for this profile.
Supported values are as follows:
pre-shared-secret—Uses a pre-shared secret for authentication.
Modes Configuration mode Configuration
Statement security { vpn { ipsec {
profile profile-name { authentication { mode mode }
} } } }
Usage Guidelines Use this command to specify the authentication method to use for an IPsec configuration profile.
Use the set form of this command to specify the authentication method to use for an IPsec configuration profile.
Use the delete form of this command to remove the authentication mode configuration.
Use the show form of this command to view the authentication mode configuration.
security vpn ipsec profile <profile-name> authentication pre-shared-secret <pre-shared-secret>
Specifies the pre-shared secret used to authenticate the VPN peer.
Syntax set security vpn ipsec profile profile-name authentication pre-shared-secret secret delete security vpn ipsec profile profile-name authentication pre-shared-secret show security vpn ipsec profile profile-name authentication pre-shared-secret Parameters profile-name
Multi-node. The name of the IPsec configuration profile.
You can define more than one IPsec profile by creating multiple profile configuration nodes.
secret
The pre-shared secret used to authenticate the VPN peer.
Modes Configuration mode Configuration
Statement security { vpn { ipsec {
profile profile-name { authentication {
pre-shared-secret secret }
} } } }
Usage Guidelines Use this command to specify the pre-shared secret used to authenticate the VPN peer.
Use the set form of this command to specify the pre-shared secret to use for an IPsec configuration profile.
Use the delete form of this command to remove the pre-shared secret configuration.
Use the show form of this command to view the pre-shared secret configuration.
security vpn ipsec profile <profile-name> authentication pre-shared-secret <secret>
security vpn ipsec profile <profile-name> bind tunnel <tunx>
Specifies the tunnel interface to associate the IPsec profile configuration with.
Syntax set security vpn ipsec profile profile-name bind tunnel tunx delete security vpn ipsec profile profile-name bind tunnel show security vpn ipsec profile profile-name bind tunnel Parameters profile-name
Multi-node. The name of the IPsec configuration profile.
You can define more than one IPsec profile by creating multiple profile configuration nodes.
tunx
The name of the tunnel interface to associate the IPsec profile configuration with.
Modes Configuration mode Configuration
Statement security { vpn { ipsec {
profile profile-name { bind {
tunnel tunx }
} } } }
Usage Guidelines Use this command to specify the tunnel interface to associate the IPsec profile configuration with.
Use the set form of this command to specify the tunnel interface to associate the IPsec profile configuration with.
Use the delete form of this command to remove the bind configuration.
Use the show form of this command to view the bind configuration.
security vpn ipsec profile <profile-name> esp-group <name>
Specifies the ESP group to use for the IPsec profile configuration.
Syntax set security vpn ipsec profile profile-name esp-group name delete security vpn ipsec profile profile-name esp-group show security vpn ipsec profile profile-name esp-group Parameters profile-name
Multi-node. The name of the IPsec configuration profile.
You can define more than one IPsec profile by creating multiple profile configuration nodes.
name
The name of the ESP group to be used for the IPsec profile configuration. The ESP group must have already been defined using security vpn ipsec esp-group
<name> on page 101.
Modes Configuration mode Configuration
Statement security { vpn { ipsec {
profile profile-name { esp-group name }
} } }
Usage Guidelines Use this command to specify the ESP group to use for the IPsec profile configuration.
Use the set form of this command to specify the ESP group to use for the IPsec profile configuration.
Use the delete form of this command to remove the ESP group configuration.
Use the show form of this command to view the ESP group configuration.
security vpn ipsec profile <profile-name> esp-group <name>
security vpn ipsec profile <profile-name> ike-group <name>
Specifies the IKE group to use for the IPsec profile configuration.
Syntax set security vpn ipsec profile profile-name ike-group name delete security vpn ipsec profile profile-name ike-group show security vpn ipsec profile profile-name ike-group Parameters profile-name
Multi-node. The name of the IPsec configuration profile.
You can define more than one IPsec profile by creating multiple profile configuration nodes.
name
The name of the IKE group to be used for the IPsec profile configuration. The IKE group must have already been defined using security vpn ipsec ike-group
<name> on page 109.
Modes Configuration mode Configuration
Statement security { vpn { ipsec {
profile profile-name { ike-group name
} } } }
Usage Guidelines Use this command to specify the IKE group to use for the IPsec profile configuration.
Use the set form of this command to specify the IKE group to use for the IPsec profile configuration.
Use the delete form of this command to remove the IKE group configuration.
Use the show form of this command to view the IKE group configuration.