Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

bounded-delay

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
bounded-delay;

Hierarchy Level

content_copy zoom_out_map
[edit security macsec connectivity-association connectivity-association-name mka (MX Series)]

Description

Configure bounded delay to ensure that a Media Access Control Security (MACsec) frame will not be delivered after a delay of two seconds or more. This ensures that a delay of MACsec frames resulting from a man-in-the-middle attack will not go undetected.

When you configure bounded delay, you must also configure replay protection by setting the replay-window-size. This is the window during which duplicate and replay packets are allowed. Bounded delay takes precedence over replay protection. You can increase the effectiveness of bounded delay protection by configuring a lower value for the window size.

Note:

Bounded delay impacts CPU utilization which can degrade performance. We recommend only configuring bounded delay on interfaces on which it is absolutely required.

Default

Bounded delay is not enabled by default.

Required Privilege Level

security

Release Information

Statement introduced in Junos OS Release 21.1R1.

footer-navigation