Services on the QFX Series - Juniper.net

Chapter 6: Configuration Statements for Encryption
security
Syntax security {
authentication-key-chains {
key-chain key-chain-name {
key key {
secret secret-data;
start-time yyyy-mm-dd.hh:mm:ss;
}
}
certificates {
cache-size bytes;
cache-timeout-negative seconds;
certification-authority ca-profile-name {
ca-name ca-identity;
crl file-name;
encoding (binary | pem);
enrollment-url url-name;
file certificate-filename;
ldap-url url-name;
}
enrollment-retry attempts;
local certificate-filename {
certificate-key-string;
load-key-file key-file-name;
}
maximum-certificates number;
path-length certificate-path-length;
}
ssh-known-hosts {
host {
fetch-from-server host-name;
load-key-file file-name;
}
}
traceoptions {
file filename ;
flag flag;
level level;
no-remote-trace
}
}
Hierarchy Level
[edit]
Release Information
Description
Statement introduced in Junos OS Release 11.1 for the QFX Series.
Configure security services. Most of the configuration statements do not have default
values. If you do not specify an identifier for a statement that does not have a default
value, you cannot commit the configuration.
Required Privilege
Level
Copyright © 2013, Juniper Networks, Inc.
55