JN0-336: Security, Specialist (JNCIS-SEC)

Proxy IDs are negotiated during IKE Phase 2 and must correspond between peers (with each peer’s local value matching the other peer’s remote value) for the IPsec SA to establish. For a route-based VPN, Junos defaults both the local and remote proxy IDs to 0.0.0.0/0 (service any). Proxy IDs may also be manually configured. Internet Key Exchange | Junos OS