Cisco Macsec - Interface protocol down

[osw200051]

Hi Exprt,

I am deploying cisco macsec by using two cisco C9300 in two sites. And the inter-connection is using MetroEthernet.

But found that after deployed macsec, physical port status is up, but protocal is down. 

After debug the mka policy, found that "No live peers present, so need to send a MKPDU with just a Live/Potential Peers Parameter Set."

Did anyone have same experience and can share the resolution to me?

Thanks

[balaji.bandi]

We do run some MACsec between Cat 9500 part of the testing never seen this error :  ( what IOX SE code running, you confirmed before enable MACsec Link working as expected right ?)

Look at some troubleshoot guide :

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-9300-series-switches/216849-troubleshoot-macsec-on-catalyst-9000.html

[Mark Elsen]

 - Check if this bug report could apply :

               https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf86295

 M.