[j-nsp] Macsec not working with carrier ethernet link

Doug McIntyre merlyn at geeks.org
Thu Jul 26 18:24:53 EDT 2018


On Thu, Jul 26, 2018 at 05:35:42PM -0400, Chuck Anderson wrote:
> Ask your Juniper rep for a feature that Cisco calls "WAN MACsec".

Juniper calls it MACsec.

The OP probably needs to make sure the firmware is correct for his platform.
https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/macsec.html

MACsec is also a licensed product.

Make sure the switches were ordered with the EX-QFX-MACSEC-ACC3 license.




> On Thu, Jul 26, 2018 at 11:01:37PM +0200, james list wrote:
> > Dear experts,
> > I have a virtual chassis of ex4300 connected to another vc of ex4300 with 2
> > x 1 Gbs links provided by two carriers.
> > 
> > Lacp aggregation is up with just one carrier1 link encrypted with macsec,
> > unfortunately carrier2 is not going to find the problem and macsec packet
> > are not transported.
> > 
> > I sent them the 802.1ae standard and ethertype to transport but no way.
> > 
> > As far as I could understand they have Huawei devices.
> > 
> > Do you have any suggestion for me to let them verify?
> > 
> > Cheers
> > James
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp


More information about the juniper-nsp mailing list