Re: [j-nsp] MX204 MACsec

2019-11-27 Thread Richard McGovern via juniper-nsp
--- Begin Message --- So it looks SW allows for the commands, as other MX products do have MACsec support. I am 99.999% sure these commands will do nothing but make your config file larger. Thanks for the input. Rich Richard McGovern Sr Sales Engineer, Juniper Networks 978-618-3342 I’d rat

Re: [j-nsp] MX204 MACsec

2019-11-27 Thread Aaron Gould
Not knowing much about this, but going from this site's guidance ( I stopped halfway down the page ) , https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/macsec-configuring-mx-series.html ...i did the following... [edit] me@site2-204-3# show | compare [edit] + securit

Re: [j-nsp] MX204 MACsec

2019-11-27 Thread Richard McGovern via juniper-nsp
--- Begin Message --- Oh, I am sure the commands are there in the CLI as Juniper generally does not "hide' non-affecting functions from the CLI, on a per product basis. If actually used you 'might' get a "unsupported on this platform" message, when you try to commit. For sure if used, these co

Re: [j-nsp] MX204 MACsec

2019-11-27 Thread Aaron Gould
I don't know much about this, but, for what it's worth, I do see this on one of my MX204's... me@site2-204-3# set security macsec connectivity-association test ? Possible completions: <[Enter]>Execute this command + apply-groups Groups from which to inherit configuration data

Re: [j-nsp] MX204 MACsec

2019-11-27 Thread Richard McGovern via juniper-nsp
--- Begin Message --- I am fairly certain the original link that Graham posted - https://apps.juniper.net/feature-explorer/parent-feature-info.html?pFName=Media%20Access%20Control%20Security%20(MACsec) - where it shows that the MX204 has support for Unicast MAC DA for MACsec is inaccurate. One

Re: [j-nsp] MX204 MACsec

2019-11-26 Thread Mohammad Khalil
Thank you very much. On Tue, 26 Nov 2019 at 22:33, Roger Wiklund wrote: > Here you go > > > https://www.juniper.net/documentation/en_US/junos/topics/topic-map/understanding_media_access_control_security_qfx_ex.html#jd0e108 > > > On Tue, Nov 26, 2019 at 9:29 PM Mohammad Khalil > wrote: > >> Than

Re: [j-nsp] MX204 MACsec

2019-11-26 Thread Roger Wiklund
Here you go https://www.juniper.net/documentation/en_US/junos/topics/topic-map/understanding_media_access_control_security_qfx_ex.html#jd0e108 On Tue, Nov 26, 2019 at 9:29 PM Mohammad Khalil wrote: > Thanks Roger for the kind feedback. > Is there any HW related documentation I can use for this

Re: [j-nsp] MX204 MACsec

2019-11-26 Thread Mohammad Khalil
Thanks Roger for the kind feedback. Is there any HW related documentation I can use for this? On Tue, 26 Nov 2019 at 22:28, Roger Wiklund wrote: > Hi > > MX204 does not support MACsec, it lacks the hardware for it. > > > > On Tue, Nov 26, 2019 at 9:04 PM Mohammad Khalil > wrote: > >> Thanks Gra

Re: [j-nsp] MX204 MACsec

2019-11-26 Thread Roger Wiklund
Hi MX204 does not support MACsec, it lacks the hardware for it. On Tue, Nov 26, 2019 at 9:04 PM Mohammad Khalil wrote: > Thanks Graham for the kind reply. > But in general that means MACsec standard 802.1ae is not support on MX204 > ports? > > Thanks again > > On Tue, 26 Nov 2019 at 21:44, Gr

Re: [j-nsp] MX204 MACsec

2019-11-26 Thread Mohammad Khalil
Thanks Graham for the kind reply. But in general that means MACsec standard 802.1ae is not support on MX204 ports? Thanks again On Tue, 26 Nov 2019 at 21:44, Graham Brown wrote: > Hi Mohammad, > > The following link displays specific elements pertaining to MACSec support > on various Juniper pl

Re: [j-nsp] MX204 MACsec

2019-11-26 Thread Graham Brown
Hi Mohammad, The following link displays specific elements pertaining to MACSec support on various Juniper platforms, MX204 included: https://apps.juniper.net/feature-explorer/parent-feature-info.html?pFName=Media%20Access%20Control%20Security%20(MACsec) Review the link and ask the customer for

[j-nsp] MX204 MACsec

2019-11-26 Thread Mohammad Khalil
Dears I am working with a customer and MX204 is in play. The customer concern is MACsec feature support , I have read around that MX204 doesn’t Support a real MACSEC, but offers unicast MAC DA for MACsec and MACsec with fallback PSK are which related to allow exchanging and establishing Macsec conn