MACsec (Media Access Control Security)

Use of the MACSec feature requires a slot-based MACsec Feature License.

Note

MACsec is not supported on 5320-16P-2MXT-2X and 5320-24T-4X-XT models.

MACsec Platform Support

Table 8 lists the platforms that support MACsec and the ports on which MACsec is supported.

Table 1. Table 8: MACsec Supported Platforms
Platform	Ports	LRM/MACsec Adapter Required?
5120 Series	Supported on all front-panel ports except stacking ports.	No
5320 Series	Supported on all front-panel ports except stacking ports. Not supported on models 5320-16P-2MXT-2X and 5320-24T-4X-XT.	No
5420 Series	Supported on all front-panel ports except stacking ports.	No
5520 Series	Supported on all front-panel ports. Not supported on 5520-VIM-4X, 5520-24X 10G ports, and Universal Ethernet ports.	No
5720 Series	Supported on all front-panel ports except stacking ports.	No
7520-48YE-8CE	Supported on all front-panel ports.	No

MAC Security Feature License

Slot-based MACsec licenses have the following behaviors:

Table 2. Table 10: MACsec License Behavior
Switch Type	No License	License Installed
Standalone Switch	The command `show macsec` is the only available command. MACsec cannot be configured or enabled.	All MACsec commands are available. MACsec can be configured on MACsec-capable slots. If configured, MACsec can be enabled.
Stack	All MACsec commands are available. MACsec can be configured and enabled.	All MACsec commands are available. MACsec can be configured and enabled on licensed slots.

Note

In a stack, any slot configured with a MACsec-capable module (with configure slot slot module module_type) can be configured for MACsec, even if the slot is not physically present, or if the slot is present, but does not have a valid MACsec license installed.