Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

MACsec

  • MACsec support in dynamic and static CAK mode (QFX5130-48CM)—Starting in Junos OS Evolved Release 23.4R2, this platform supports Media Access Control Security (MACsec) in dynamic and static connectivity association key (CAK) mode on physical interfaces for switch-to-host and switch-to-switch links. The QFX5130-48CM supports MACsec on 32 SFP-DD ports (et-0/0/0 through et-0/0/31) and 4 QSFP-DD ports (et-0/0/52 through et-0/0/55). This device supports the following MACsec encryption types:

    • GCM-AES-128

    • GCM-AES-256

    • GCM-AES-XPN-128

    • GCM-AES-XPN-256

    When you configure MACsec on this device, configure the maximum transmission unit (MTU) to be 40 bytes larger than the expected traffic size. The MACsec tag takes up 40 bytes. The maximum MTU is 9216 bytes.

    [See Configuring MACsec.]