MACsec adds a header to packets passing through interfaces
where MACsec is enabled. If a packet is near the protocol MTU limit, and the
MTU is not adjusted to account for the MACsec header, the packet can exceed the
interface MTU when the MACsec header is added. In that case, the device drops
the packet. Before enabling MACsec, you must ensure your protocol MTU is large
enough to accommodate the additional 32 bytes of MACsec overhead.
| Product / Application | Software | Introduced Release |
|---|---|---|
| MX301 | Junos OS | 25.4R1 |
| MX304 | Junos OS | 25.4R1 |
| MX304 | Junos OS | 25.2R1 |
| MX960 | Junos OS | 25.4R1 |
| MX960 | Junos OS | 25.2R1 |
| MX2020 | Junos OS | 25.4R1 |
| MX2020 | Junos OS | 25.2R1 |
| MX10003 | Junos OS | 25.4R1 |
| MX10003 | Junos OS | 25.2R1 |
| MX10008 | Junos OS | 25.4R1 |
| MX10008 | Junos OS | 25.2R1 |