Example of Creating and Editing a VPN Security Profile

Creating a new VPN security profile:

Admin@nodename# create vpn server-security-profiles <profile-name> <parameters> Admin@nodename# create vpn client-security-profiles <profile-name> <parameters> ... Admin@nodename# create vpn server-security-profiles name "New server VPN profile"

Editing parameters of a VPN security profile:

Admin@nodename# set vpn server-security-profiles <profile-name> <parameters> Admin@nodename set vpn client-security-profiles <profile-name> <parameters> ... Admin@nodename# set vpn server-security-profiles "New server VPN profile" phase1-security [ SHA1/AES128 SHA1/3DES ] phase2-security [ SHA1/AES128 SHA1/3DES ] Admin@nodename# set vpn server-security-profiles "New server VPN profile" dh-groups [ "Group 16 Prime 4096 bit" ] Admin@nodename# set vpn server-security-profiles "New server VPN profile" nat-keepalive 20

Remove parameters of a VPN security profile:

Admin@nodename# delete vpn server-security-profiles <profile-name> <parameters> Admin@nodename# delete vpn client-security-profiles <profile-name> <parameters> ... Admin@nodename# delete vpn server-security-profiles "New server VPN profile" phase1-security [ MD5/AES128 ] Admin@nodename# delete vpn server-security-profiles "New server VPN profile" phase2-security [ MD5/AES128 ] Admin@nodename# delete vpn server-security-profiles "New server VPN profile" dh-groups [ "Group 16 Prime 4096 bit" ]

Viewing information on configured VPN security profiles:

Admin@nodename# show vpn server-security-profiles <profile-name> Admin@nodename# show vpn client-security-profiles <profile-name> ... Admin@nodename# show vpn client-security-profiles "New client VPN profile"