01-14-2020 05:00 AM - edited 01-14-2020 05:02 AM
Hi
I am trying to get a macsec 256 link between a 9300-24T-A(ios xe 16.6.6) and WS-3850-24S-S (ios xe 16.5.3)
according to ciscos cfn both platforms and software versions should support this and i see the 9300 and 3850 supports this in the configuration, but when i try to apply the MKA policy with gcm-aes-256 on the interface of the 3850, it says "only gcm-aes-128 is supported on this interface". the 9300 doesnt complain about this.
Anyone know the reason for this?
i have gotten the link to work with aes 128 thus far.
Regards
Solved! Go to Solution.
01-14-2020 06:39 AM
- The message is rather clear and probably due to 'software capable' restrictions in the release being used on the 3850. Options are limited to use and try latest release for the particular platform.
M.
01-14-2020 06:39 AM
- The message is rather clear and probably due to 'software capable' restrictions in the release being used on the 3850. Options are limited to use and try latest release for the particular platform.
M.
01-16-2020 11:00 AM
i upgraded to ios xe 16.6.6 release and now its working.
much thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide