I am lab testing a MACSEC configuration from an NCS55A2 to an ISR4431. However, the NCS only does macsec on 10G or higher interfaces, so I have made a switchport connection, access-mode same vlan, such that the NCS can connect at 10G and the ISR at 1G. Before doing any macsec work, I have confirmed the two can at least ping each other through that set up. When I go to configure basic macsec (just PSK and default policy), both devices show this:
Status: Init - Searching for Peer (Waiting to receive first Peer MKPDU)
It is as though the Nexus in this case is intercepting the macsec packets and they are not traversing that test set up. The final design is that the NCS connects to transport at 10G, and the ISR connects to the same transport environment at 1G, with a logical circuit built between them.
Thanks in advance for any suggestions!
