macsec (MX Series)
Syntax
macsec {
connectivity-association connectivity-association-name {
cipher-suite encryption-algorithm-name;
exclude-protocol protocol-name;
pre-shared-key-chain macsec-pre-shared-key-chain-name
include-sci;
mka {
key-server-priority priority-number;
must-secure;
should-secure;
transmit-interval interval;
}
no-encryption;
offset (0|30|50);
pre-shared-key {
cak hexadecimal-number;
ckn hexadecimal-number;
}
replay-protect{
replay-window-size number-of-packets;
}
secure-channel secure-channel-name {
direction (inbound | outbound);
encryption ;
id {
mac-address mac-address;
port-id port-id-number;
}
offset (0|30|50);
security-association security-association-number {
key key-string;
}
}
security-mode security-mode;
}
interfaces interface-name {
connectivity-association connectivity-association-name;
}
}
Hierarchy Level
[edit security]
Description
Configure Media Access Control Security (MACsec) on MX Series routers.
Options
The remaining statements are explained separately.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 15.1.