Supported Platforms
security-mode
Syntax
Hierarchy Level
Release Information
Statement introduced in Junos OS Release 13.2X50-D15.
Description
Configure the MACsec security mode for the connectivity association.
We recommend enabling MACsec using static connectivity association key (CAK) security mode. Static CAK security mode ensure security by frequently refreshing to a new random secure association key (SAK) and by only sharing the SAK between the two devices on the MACsec-secured point-to-point link. Additionally, some optional MACsec features—replay protection, SCI tagging, and the ability to exclude traffic from MACsec—are only available when you enable MACsec using static CAK security mode.
Options
security-mode | — | Specifies the MACsec security mode. Options include:
|
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
