Im trying to setup a site to site vpn between two Juniper QFX5110's. Each end of the link is on the same subnet (so directly connected switches over dark fibre). I have configured each physical interface and can ping across the link.

When I try to setup the route based site to site vpn using this doco as reference I have an issue when i get to the command

set security ipsec vpn <name> ......

ipsec vpn is not an option. I have ipsec proposal and ipsec policy but no vpn.

I'm pretty lost with this, I cant seem to find anything explaining why this commands is not there and how to make a secure tunnel without it.

  • If you don't have the same commands available on your devices than in the doc, then you probably run a different software. Are your devices up to date?
    – JFL
    Aug 13, 2020 at 8:47
  • 1
    The doc you link to is for juniper SRX firewalls, I doubt IPSec is available on the QFX platform.
    – Teun Vink
    Aug 13, 2020 at 10:39

1 Answer 1


Unfortunately, QFX does not support IPSec VPNs, Teun Vink is right in that the documentation you posted is for the SRX as per the requirements section.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.