connectivity-association (MACsec Interfaces)
Syntax
connectivity-association connectivity-association-name;
Hierarchy Level
[edit security macsec interfaces interface-name]
Description
Applies a connectivity association to an interface, which enables Media Access Control Security (MACsec) on that interface.
The point-to-point links are secured after security keys are matched at the endpoints of the links. If you enable MACsec by using the static connectivity association key (CAK) security mode, user-configured, preshared keys are matched. If you enable MACsec by using the static secure association key (SAK) security mode, user-configured static security association keys are matched.
When you enable MACsec using static CAK, you have to create and configure a connectivity association.
Default
No connectivity associations are associated with any interfaces.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 13.2X50-D15.
Statement introduced on SRX devices in Junos OS Release 15.1X49-D60.