pre-shared-key (MX Series)
Syntax
pre-shared-key {
cak hexadecimal-number;
ckn hexadecimal-number;
}
Hierarchy Level
[edit security macsec connectivity-association connectivity-association-name]
Description
Specifies the pre-shared key used to enable MACsec using static connectivity association key (CAK) security mode.
A pre-shared key includes a connectivity association key name (CKN) and a connectivity association key (CAK). A pre-shared key is exchanged between two devices at each end of a point-to-point link to enable MACsec using static CAK security mode. The MACsec Key Agreement (MKA) protocol is enabled after the pre-shared keys are successfully verified and exchanged. The pre-shared key—the CKN and CAK—must match on both ends of a link.
Default
No pre-shared keys exist, by default.
Options
The remaining statements are explained separately.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 15.1.