Juniper Networks MacSec Feature License on Access Switches

Media Access Control Security (MACsec) is an industry-standard security technology that provides secure communication for almost all types of traffic on Ethernet links. MACsec provides point-to-point security on Ethernet links between directly-connected nodes and is capable of identifying and preventing most security threats, including denial of service, intrusion, man-in-the-middle, masquerading, passive wiretapping, and playback attacks. MACsec is standardized in IEEE 802.1AE.

You configure MACsec to secure point-to-point Ethernet links connecting EX series switches. Each point-to-point Ethernet link that you want to secure using MACsec must be configured independently. You can enable MACsec using static secure association key (SAK) security mode or static connectivity association key (CAK) security mode.