Services on the QFX Series - Juniper.net

Chapter 6: Configuration Statements for Encryption
certificates
Syntax certificates {
cache-size bytes;
cache-timeout-negative seconds;
certification-authority ca-profile-name {
ca-name ca-identity;
crl file-name;
encoding (binary | pem);
enrollment-url url-name;
file certificate-filename;
ldap-url url-name;
}
enrollment-retry attempts;
local certificate-name {
certificate-key-string;
load-key-file URL filename;
}
maximum-certificates number;
path-length certificate-path-length;
}
Hierarchy Level
[edit security]
Release Information Statement introduced before Junos OS Release 7.4.
Statement introduced in Junos OS Release 9.0 for EX Series switches.
Statement introduced in Junos OS Release 11.1 for the QFX Series.
Description
(Encryption interface on M Series and T Series routers and EX Series switches only)
Configure the digital certificates for IPsec.
The remaining statements are explained separately.
Required Privilege
Level
Related
Documentation
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
• Configuring Digital Certificates for an ES PIC
Copyright © 2013, Juniper Networks, Inc.
45