MACsec Router to Switch

[xpapapavlou]

"Is MACsec supported between a Cisco 8000 series router equipped with a C-NIM-2T-WAN module (or another recommended optical Layer 3 module... suggest one...), using sub interfaces in a router-on-a-stick configuration, and a Layer 2 Cisco switch connected via a trunk port?"

[Jan Rolny]

Hi,

yes, as per datasheet C-NIM-2T supports MACsec. Please check this article how to configure MACsec on subinterface:

https://www.cisco.com/c/en/us/td/docs/iosxr/cisco8000/security/711x/configuration/guide/b-system-security-cg-cisco8000-711x/configuring-macsec.html

Also be sure that your L2 switch support MACsec also otherwise it will not work.

Best regards,

Jan

[xpapapavlou · Accepted solution]

Thanks a lot !!

[Jan Rolny]

I am just adding datasheet of modules for Catalyst 8000:

https://www.cisco.com/c/en/us/products/collateral/routers/catalyst-8300-series-edge-platforms/catalyst-8000-gigabit-ethernet-wan-modules-ds.pdf