Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

MACsec

  • MACsec with GRES and NSR (MX10004 and MX10008)—Media Access Control Security (MACsec) support includes GRES and nonstop active routing (NSR) to provide nonstop MACsec service during a routing engine switchover. This feature is supported on the MIC-3D-20GE-SFP-EH, MIC-3D-20GE-SFP-E, and MIC-MACSEC-20GbE line cards.

    [See Configuring MACsec.]

  • Enable device to automatically adjust the MTU to include MACsec header (MX304, MX960, MX2020, MX10003, and MX10008)—When Media Access Control Security (MACsec) is enabled on a physical interface or a logical interface, these devices can automatically adjust the maximum transmission unit (MTU) to include the MACsec header for that interface. If the device is using the default interface MTU when this feature is enabled, the device automatically increases the interface MTU to accommodate the MACsec header. If you (the network administrator) have configured a custom interface MTU, the device automatically reduces the protocol MTU to make space for the MACsec header instead. Use this feature to ensure the interface or protocol MTU is adjusted properly to account for the MACsec overhead. Without this feature, you need to adjust the interface and protocol MTU manually.

    To enable the device to automatically adjust the MTU, configure the enable-auto-mtu-update statement at the [edit security macsec] hierarchy level.

    [See Media MTU and Protocol MTU.]