MACsec on Catalyst 9300

[OJ_Magellan]

Hi,

I have read the follwoing in Cisco Security Config guide  regarding MACsec on the Catalyst 9300 (IOS XE 17.3.x):

• MACsec is not supported on Locator ID Separation Protocol (LISP) interfaces and Cisco Software-Defined Access (SD-Access) solution.

when is it going to be supported? 

Regards,

OJ

[balaji.bandi]

what is the use case here ?

In General MACsec required when you connecting to Switch to switch, where security concern on Layer 2 connectivity.

SD-Access totally Macro and Micro segemented based on the Policy deployment.

[OJ_Magellan]

Hi BB,

Switch to Switch in a SD environment, in the Guide it says that MACsec is not supported in SDA Solution as I mentioned above. Is this still the case?

Regards,

OJ

[balaji.bandi · Accepted solution]

yes inside fabric not supported.