security vpn ipsec esp-group <name>
Defines a named ESP configuration for IKE Phase 2 negotiations.
- name
- Multi-node. The name to be used to refer to the ESP configuration.
You can create multiple ESP configurations by creating multiple esp-group configuration nodes. At least one ESP configuration must be defined, for use in tunnel configuration.
Configuration mode
security {
vpn {
ipsec {
esp-group name
}
}
}Use this command to define an ESP group.
An ESP group lets you set the Encapsulating Security Payload (ESP) parameters required for IKE Phase 2 and the lifetime of the resulting IPsec security association.
Use the set form of this command to create and modify an ESP group.
Use the delete form of this command to remove ESP group configuration.
Use the show form of this command to view ESP group configuration.