--- Begin Message ---
This appears to be a SW issue, as MX204 does NOT have any MACsec support. As
Chuck said, SW sure error in some manner, like non-supported platform etc.
Even though the config is allowed, nothing will happen in terms of MACsec - no
HW support.
Rich
Richard McGovern
Sr Sa
Interesting. I wonder if this falls under "This is implemented, but not
supported by JTAC." You'd have to actually try it to see...
On Wed, Nov 27, 2019 at 01:18:29PM -0600, Aaron Gould wrote:
> [edit]
> me@site2-204-3# show | compare
> [edit]
> + security {
> + macsec {
> + conn
[edit]
me@site2-204-3# show | compare
[edit]
+ security {
+ macsec {
+ connectivity-association my-ca1 {
+ security-mode static-cak;
+ mka {
+ transmit-interval 6000;
+ key-server-priority 0;
+ }
+
On Wed, Nov 27, 2019 at 12:54:01PM -0600, Aaron Gould wrote:
> Before or after I do that config test ? Asking since I didn't commit that
> as it's on a MX204 in a far-away place during a thanksgiving week
> network-change moratorium, I'm treading on thin ice. LOL
Either. No need to commit, just
Before or after I do that config test ? Asking since I didn't commit that
as it's on a MX204 in a far-away place during a thanksgiving week
network-change moratorium, I'm treading on thin ice. LOL
-Aaron
___
juniper-nsp mailing list juniper-nsp@puck.
Can you do "show security" and see if there as a message about "unsupported"?
On Wed, Nov 27, 2019 at 10:50:07AM -0600, Aaron Gould wrote:
> Not knowing much about this, but going from this site's guidance ( I stopped
> halfway down the page ) ,
> https://www.juniper.net/documentation/en_US/juno
6 matches
Mail list logo