cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
971
Views
5
Helpful
1
Replies

N9K MACSEC and SPAN

Wes Smith
Level 1
Level 1

On NX 93240-FX2 devices that use MACSEC on the  40/100 QSFP ports 

What does SPAN capture for MACSEC secured ports?   Does it capture the clear-text data or the encrypted stream ?

I have not been able to find any reference.  

Thanks in advance 

1 Reply 1

BrianSekleckiGE
Level 1
Level 1

Did you ever get a chance to test this? Since the encryption happens in Hardware, presumably after the SPAN process in software replicates the switchport's outbound buffer, I assume you see the cleartext contents?

 

In which case, you would need a passive optical splitter to observe the encrypted traffic on the wire.

Review Cisco Networking for a $25 gift card