transmit-interval (MACsec)
Syntax
transmit-interval interval;
Hierarchy Level
[edit security macsec connectivity-association connectivity-association-name mka]
Description
Specifies the transmit interval for MACsec Key Agreement (MKA) protocol data units (PDUs).
The MKA transmit interval setting sets the frequency for how often the MKA PDU is sent to the directly connected device to maintain MACsec on a point-to-point Ethernet link. A lower interval increases bandwidth overhead on the link; a higher interval optimizes the MKA protocol data unit exchange process.
The transmit interval settings must be identical on both ends of the link when MACsec using static connectivity association key (CAK) security mode is enabled.
We recommend increasing the interval to 6000 milliseconds in high-traffic load environments.
For SRX300 series devices, we recommend a MKA transmit interval of 7000 milliseconds (the default) for revenue ports. And, because the MKA transmit interval on both ends of the physical connection should match, we likewise recommend that the MKA transmit interval on the peer node of the connecting device also be set at 7000 milliseconds.
Default
The default transmit interval is 2000 milliseconds, with the exception of SRX300 series, which has a default transmit interval of 7000 milliseconds.
Starting in Junos OS Release 20.4R1, on SRX380, the default transmit interval is 2000 milliseconds.
Options
| interval | Specifies the transmit interval, in milliseconds. |
Range: 2000 to 6000 milliseconds, with the exception of SRX300 series, which has a range of 2000 to 10,000 milliseconds.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 13.2X50-D15.