topic Re: Cisco C8300 MACSEC Problem in Network Security

Cisco C8300 MACSEC Problem

arslan nawaz — Thu, 03 Nov 2022 05:16:35 GMT

Hi,

I need the help. I have cisco C8300 router running in Autonomous mode. I can't enable MACSEC on interface level. When I try to enter the MACSEC command on interface level it shows invalid input. AS shown below

Router(config)#interface tenGigabitEthernet 0/0/4

Router(config-if)#mka policy Test

Router(config-if)#mka pre-shared-key key-chain Test

Router(config-if)#macsec

% Invalid input detected at '^' marker.

The software version is

Router#show version

Cisco IOS XE Software, Version 17.03.04a

Cisco IOS Software [Amsterdam], c8000be Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.3.4a, RELEASE SOFTWARE (fc3)

Can any one guide me why I couldn't enable macsec on interface.

Many Regards

Arslan

Re: Cisco C8300 MACSEC Problem

balaji.bandi — Thu, 03 Nov 2022 06:39:03 GMT

what is the full model of the device : (show platform, also check show License summary)

Re: Cisco C8300 MACSEC Problem

arslan nawaz — Thu, 03 Nov 2022 07:04:48 GMT

The model is C8300-2N2S-4T2X.

I am configuring MACSEC on the router built-in 10G SFP+ ports

Also the "show macsec" command not available

Arslan

Re: Cisco C8300 MACSEC Problem

balaji.bandi — Thu, 03 Nov 2022 07:30:23 GMT

post below information : (you need HSEC License)

show platform, show License summary

Re: Cisco C8300 MACSEC Problem

arslan nawaz — Thu, 03 Nov 2022 12:15:53 GMT

Thank you for providing the support

Following is the output of show license summary

R1#show license summary
License Usage:
License Entitlement Tag Count Status
-----------------------------------------------------------------------------
Router US Export Lic... (DNA_HSEC) 0 NOT IN USE

If its license issue how can it resolved?