--- Begin Message ---
I am fairly certain the original link that Graham posted -
https://apps.juniper.net/feature-explorer/parent-feature-info.html?pFName=Media%20Access%20Control%20Security%20(MACsec)
- where it shows that the MX204 has support for Unicast MAC DA for MACsec is
inaccurate. One would first need MACsec support to support this extra feature,
and the MX204 does NOT have MACsec [HW] support, as Roger pointed out.
I will try to get this inaccuracy corrected.
Just FYI, Rich
Richard McGovern
Sr Sales Engineer, Juniper Networks
978-618-3342
I’d rather be lucky than good, as I know I am not good
I don’t make the news, I just report it
On 11/26/19, 7:12 PM, "Mohammad Khalil" <[email protected]> wrote:
Thank you very much.
On Tue, 26 Nov 2019 at 22:33, Roger Wiklund <[email protected]> wrote:
> Here you go
>
>
>
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/understanding_media_access_control_security_qfx_ex.html#jd0e108
>
>
> On Tue, Nov 26, 2019 at 9:29 PM Mohammad Khalil <[email protected]>
> wrote:
>
>> Thanks Roger for the kind feedback.
>> Is there any HW related documentation I can use for this?
>>
>> On Tue, 26 Nov 2019 at 22:28, Roger Wiklund <[email protected]>
>> wrote:
>>
>>> Hi
>>>
>>> MX204 does not support MACsec, it lacks the hardware for it.
>>>
>>>
>>>
>>> On Tue, Nov 26, 2019 at 9:04 PM Mohammad Khalil <[email protected]>
>>> wrote:
>>>
>>>> Thanks Graham for the kind reply.
>>>> But in general that means MACsec standard 802.1ae is not support on
>>>> MX204
>>>> ports?
>>>>
>>>> Thanks again
>>>>
>>>> On Tue, 26 Nov 2019 at 21:44, Graham Brown <
>>>> [email protected]>
>>>> wrote:
>>>>
>>>> > Hi Mohammad,
>>>> >
>>>> > The following link displays specific elements pertaining to MACSec
>>>> support
>>>> > on various Juniper platforms, MX204 included:
>>>> >
>>>>
https://apps.juniper.net/feature-explorer/parent-feature-info.html?pFName=Media%20Access%20Control%20Security%20(MACsec)
>>>> >
>>>> >
>>>> > Review the link and ask the customer for clarification on what they
>>>> > require to be supported from the equipment. Depending on what the
>>>> > requirements are, the MX204 may be able to secure the L2 elements for
>>>> your
>>>> > customer.
>>>> >
>>>> > HTH,
>>>> > Graham
>>>> >
>>>> > Graham Brown
>>>> > Twitter - @mountainrescuer
<https://urldefense.com/v3/__https://twitter.com/*!/mountainrescuer__;Iw!8WoA6RjC81c!UHGI_Mb1oXZlTiCFR8_FUyBeKvhoVEZvYb4AHYnNKMQe2Q7-4YA9vOgO1s83R0MiLA$
>
>>>> > LinkedIn
<https://urldefense.com/v3/__http://www.linkedin.com/in/grahamcbrown__;!8WoA6RjC81c!UHGI_Mb1oXZlTiCFR8_FUyBeKvhoVEZvYb4AHYnNKMQe2Q7-4YA9vOgO1s8q9zu26w$
>
>>>> >
>>>> >
>>>> > On Wed, 27 Nov 2019 at 08:39, Mohammad Khalil <[email protected]>
>>>> wrote:
>>>> >
>>>> >> Dears
>>>> >> I am working with a customer and MX204 is in play.
>>>> >> The customer concern is MACsec feature support , I have read around
>>>> >> that MX204 doesn’t Support a real MACSEC, but offers unicast MAC DA
>>>> for
>>>> >> MACsec and MACsec with fallback PSK are which related to allow
>>>> exchanging
>>>> >> and establishing Macsec connections.
>>>> >> So frankly MX204 does not support MACsec or am I missing something?
>>>> >>
>>>> >> Thanks
>>>> >> _______________________________________________
>>>> >> juniper-nsp mailing list [email protected]
>>>> >>
https://urldefense.com/v3/__https://puck.nether.net/mailman/listinfo/juniper-nsp__;!8WoA6RjC81c!UHGI_Mb1oXZlTiCFR8_FUyBeKvhoVEZvYb4AHYnNKMQe2Q7-4YA9vOgO1s-Bo4W0CQ$
>>>> >>
>>>> >
>>>> _______________________________________________
>>>> juniper-nsp mailing list [email protected]
>>>>
https://urldefense.com/v3/__https://puck.nether.net/mailman/listinfo/juniper-nsp__;!8WoA6RjC81c!UHGI_Mb1oXZlTiCFR8_FUyBeKvhoVEZvYb4AHYnNKMQe2Q7-4YA9vOgO1s-Bo4W0CQ$
>>>>
>>>
--- End Message ---
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
