Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] What are the IKE Proposal Types?



Article ID: KB6719 KB Last Updated: 28 May 2019Version: 4.0
What are the IKE Proposal Types?
What do the following proposal types map to?
  • Basic
  • Standard
  • Compatible

The different IKE Proposal Types are as follows:

Standard:  pre-g2-3des-sha, pre-g2-aes128-sha
Compatible:  pre-g2-3des-sha, pre-g2-des-sha, pre-g2-3des-md5, pre-g2-des-md5
Basic:  pre-g1-des-sha, pre-g1-des-md5
Custom:  You choose the proposals

The default IKE Proposal is standard.  Please note that if you do not know how the other end of the VPN is configured, choosing compatible offers the most choices.

For more details, refer to ScreenOS Concepts & Examples Guide - VPN:
Phase 1 (IKE) proposals - see page 11
Phase 2 proposals - see page 14
Modification History:
2019-05-22: Content reviewed for accuracy.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search