Configure macsec on 8500

[heba-elsherbiny]

I have Cisco 8500 router with IOS 17.9

i can't find command line to configure macsec / mka

do i need additional license for this ?

#sh ver
Cisco IOS XE Software, Version 17.09.03a
Cisco IOS Software [Cupertino], c8000aep Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.9.3a, RELEASE SOFTWARE (fc2)

[liviu.gheorghe]

Hello @heba-elsherbiny ,

MACsec support require a DNA Essentials or DNA Advantage subscription activated on the router. You can verify what licenses are activated on the router with the show license usage command.

Hope this helps.

[heba-elsherbiny]

so this the output of show license on my device 

#show license summary
Account Information:
Smart Account: <none>
Virtual Account: <none>

License Usage:
License Entitlement Tag Count Status
-----------------------------------------------------------------------------
Router US Export Lic... (DNA_HSEC) 0 NOT IN USE

[liviu.gheorghe · Accepted solution]

From the output provided, I can see that you don't have any DNA subscriptions activated on the router - this is the reason you cannot find the command for activating MACsec..

You can try activating the perpetual licenses that are present usually on the device with the following command:

license boot level network-essentials addon dna-essentials

save the configuration and reload the router. If the perpetual licenses are present on the router, then after the reload you should have the MACsec commands available.

You can verify that the licenses are activated on the router with the show license usage command.

[johneofficial]

for me this command did not work

license boot level network-essentials addon dna-essentials

I went with license boot level network-advantage
add-on dna-advantage and i was able to enable macsec on my 8500