topic Re: Configure macsec on 8500 in Network Access Control

Configure macsec on 8500

heba-elsherbiny — Sat, 23 Mar 2024 10:47:43 GMT

I have Cisco 8500 router with IOS 17.9

i can't find command line to configure macsec / mka

do i need additional license for this ?

#sh ver
Cisco IOS XE Software, Version 17.09.03a
Cisco IOS Software [Cupertino], c8000aep Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.9.3a, RELEASE SOFTWARE (fc2)

Re: Configure macsec on 8500

liviu.gheorghe — Sat, 23 Mar 2024 13:01:21 GMT

Hello @heba-elsherbiny ,

MACsec support require a DNA Essentials or DNA Advantage subscription activated on the router. You can verify what licenses are activated on the router with the show license usage command.

Hope this helps.

Re: Configure macsec on 8500

heba-elsherbiny — Sat, 23 Mar 2024 13:26:17 GMT

so this the output of show license on my device

#show license summary
Account Information:
Smart Account: <none>
Virtual Account: <none>

License Usage:
License Entitlement Tag Count Status
-----------------------------------------------------------------------------
Router US Export Lic... (DNA_HSEC) 0 NOT IN USE

Re: Configure macsec on 8500

liviu.gheorghe — Sat, 23 Mar 2024 13:35:12 GMT

From the output provided, I can see that you don't have any DNA subscriptions activated on the router - this is the reason you cannot find the command for activating MACsec..

You can try activating the perpetual licenses that are present usually on the device with the following command:

license boot level network-essentials addon dna-essentials

save the configuration and reload the router. If the perpetual licenses are present on the router, then after the reload you should have the MACsec commands available.

You can verify that the licenses are activated on the router with the show license usage command.

Re: Configure macsec on 8500

johneofficial — Wed, 23 Oct 2024 14:34:10 GMT

for me this command did not work

license boot level network-essentials addon dna-essentials

I went with license boot level network-advantage
add-on dna-advantage and i was able to enable macsec on my 8500