WS-4500X-32 Support for TrustSec MACsec Encryption

[dfranjoso]

Hello all,

Does anyone know when will the WS-4500X-32 support the TrustSec MACsec Encryption ?

Thanks!

David

[Steve Fuller]

Hi,

Cisco have told me it would be available in a software release which is targeted for Q3 CY13. As with any dates like this, things may be subject to change.

Regards

Sent from Cisco Technical Support iPhone App

[TCAM]

Sorry to bring this old post back.  Tried to enable macsec encryption on 4500-x-16-sfp but it is still not supported.  IOS-XE image: cat4500e-universalk9.SPA.03.03.02.SG.151-1.SG2.bin  (License Level: entservices)

Anyone know when it will be supported?

[Steve Fuller]

Hi,

MACSec support on the Catalyst 4500X as from IOS XE 3.5.0. As per the New Software Features in Release IOS XE 3.5.0E section of the release notes:

MACSec Encryption on Cisco Catalyst 4500-X

IEEE 802.1ae MACSec Layer 2 encryption
IEEE 802.1ae MACSec encryption on user-facing ports
IEEE 802.1ae MACSec encryption between switch-to-switch links using Cisco Security Association Protocol (SAP)

Regards

[TCAM]

Good info & thanks Steve.

Glad that I posted the question.  I was looking at IOS XE 3.4.5 release note and couldn't find it.  I overlooked, I thought 3.4.5 was the latest one.  Will upgrade and try.

[Steve Fuller]

We've had this working for some time now between pairs of Catalyst 4500X, and between Catalyst 4500X and Nexus 7K.

I'm not sure what your plans are, but we had an issue connecting to the N7K due to CSCum21037. This bug means the 4500X incorrectly encrypts traffic destined to the multicast mac address (01:00:0C:CC:CC:CC) which affects a number of protocols including CDP and UDLD.

Regards