include-sci
Syntax
include-sci;
Hierarchy Level
[edit security macsec connectivity-association]
Description
Specify that the SCI tag be appended to each packet on a link that has enabled MACsec.
You must enable SCI tagging on a switch that is enabling MACsec on an Ethernet link connecting to an SRX device.
SCI tags are automatically appended to packets leaving a MACsec-enabled interface on an SRX device. This option is, therefore, not available on an SRX device.
You should only use this option when connecting a switch to an SRX device, or to a host device that requires SCI tagging. SCI tags are eight octets long, so appending an SCI tag to all traffic on the link adds a significant amount of unneeded overhead.
Default
SCI tagging is enabled on an SRX Series Firewall that have enabled MACsec using static connectivity association key (CAK) security mode, by default.
SCI tagging is disabled on all other interfaces, by default.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 15.1X49-D60.