Licensing

Bandwidth-based MACsec license support (MX240, MX304, MX480, MX960, MX2008, MX2010, MX2020, MX10003, MX10004, MX10008, and MX10016)—Starting in Junos OS Release 23.1R1, the Media Access Control security (MACsec) support on the listed devices requires installation of MACsec bandwidth licenses. These licenses are perpetual.

The MACsec feature licenses are available in the following variants:

• S-MX-1C-MSEC-P—100-Gigabit Ethernet license

• S-MX-4C-MSEC-P—400-Gigabit Ethernet license

• S-MX-4C8-MSEC-P—480-Gigabit Ethernet license

The minimum number of MACsec bandwidth licenses installed must be greater than or equal to the configured bandwidth of MACsec-enabled ports.

You can view the MACsec bandwidth license usage by using the command show system macsec license. You can view the usage of different feature licenses by using the command show system license.

Juniper Agile Licensing supports soft enforcement for MACsec bandwidth licenses. With soft enforcement, the feature remains operational even without a valid license. However, you will receive commit warnings and periodic alarms insisting on installation of a valid license.

[See Flex Software License for MX Series Routers and MPC Service Cards and Managing Licenses.]

Support to trigger license alarm at configured time interval (EX Series, MX Series, QFX Series, and SRX Series)—Starting in Junos OS Release 23.1R1, you can set the time interval at which you want to trigger alarms for features or capacity that do not have licenses installed.

To set the alarm log frequency, use the command log-frequency in the set system license hierarchy.

[See Managing Licenses.]

Soft enforcement of MACsec license(PTX10001-36MR, PTX10003, PTX10004, PTX10008, and PTX10016)—Starting in Junos OS Evolved Release 23.1R1, we've enabled soft enforcement of Media Access Control security (MACsec) license on the listed devices. The license entitles to:

• Enabling MACsec

• Available MACsec license bandwidth is sum of bandwidth associated to each installed MACsec license key.

If you enable a feature without a MACsec license, Junos OS reports the absence of the license through alarms, syslog, and warning messages on the CLI.

You can track the MACsec bandwidth at the chassis level by using the configured or default port speed as a measure of bandwidth unit consumption.

• MACsec is enabled on the physical interface.

• Physical interface admin state is up.

• At least one user-configured logical interface on the physical interface.

[See Flex Software License for PTX Series Routers.]