Additional Features

We have extended support for the following features to the platforms shown in parentheses:

• Collect ON_CHANGE BGP RIB telemetry statistics (PTX10001-36MR, PTX10003, PTX10004, PTX10008, PTX10016, and QFX5220)

  [See Telemetry Sensor Explorer.]

• Collect ON_CHANGE BGP RIB telemetry statistics and BGP neighbor telemetry with sharding (ACX7100-32C, ACX7100-48L, ACX7509, PTX10001-36MR, PTX10004, PTX10008, PTX10016, QFX5130-32CD, and QFX5700)

  [See Telemetry Sensor Explorer.]

• Media Access Control Security (MACsec) (QFX5700 with 20x25G line cards)—

  Support includes:

  • AES-128 and AES-256 encryption

  • Extended packet numbering

  • Fallback preshared key (PSK)

  • Timer-based MACsec secure association key (SAK) refresh

  • Jumbo MTU support

  • Fail-open mode

  • PSK hitless rollover

  [See Understanding Media Access Control Security (MACsec).]

• Supported transceivers, optical interfaces, and direct attach copper (DAC) cables —Select your product in the Hardware Compatibility Tool to view supported transceivers, optical interfaces, and DAC cables for your platform or interface module. We update this tool and provide the first supported release information when the optic becomes available.

• Support for TCP authentication and keychain (QFX5700 and QFX5220)—We asupport TCP authentication and key update mechanism for BGP and LDP routing protocols, which enables you to update authentication keys without interrupting associated routing and signaling protocols.

  [See Authentication for Routing Protocols, authentication-key-chain (Protocols LDP), authentication-algorithm, and authentication-key-chain (Protocols BGP and BMP).]

• Support for TCP Authentication Option (TCP-AO) (QFX5220)—You can now use TCP-AO to authenticate TCP segments exchanged during BGP and LDP sessions.

  [See TCP Authentication Option (TCP-AO) and authentication-key-chains (TCP-AO).]