MACSEC Verification(manul mode)

Eugen Bitca — Sat, 09 Mar 2019 00:10:59 GMT

Hello,

I have macsec (manual mode) between 4500-x and Cat6500 Sup2.

How can I verifiy if MACSEC do realy encrypt traffic, SPAN session shows traffic unencrypted.

Configuration on both sides:

interface GigabitEthernet1/1
switchport mode trunk
switchport nonegotiate
mtu 9198
cts manual
no propagate sgt
sap pmk 0000000000000000000000000000000000000000000000000000000000ABC123 mode-list gcm-encrypt
storm-control broadcast level 2.00

Thank you

Re: MACSEC Verification(manul mode)

Eugen Bitca — Mon, 08 Oct 2018 10:29:37 GMT

MacSec EtherType 0x88e5 is transmitted over EoMPLS network.

So, between 2 MacSec Ports I configured a small test EoMPLS network, and inside MPLS, SPAN sessions shows encrypted traffic.

topic MACSEC Verification(manul mode) in Switching

MACSEC Verification(manul mode)

Re: MACSEC Verification(manul mode)