MACsec Performance

Table 1. MACsec product support

Feature

Product

Release introduced

MACsec 2AN mode (static)

Note:

VOSS 5.0 officially removed the replay protection commands. Do not use replay protection in earlier releases.

5320 Series

Not Supported

5420 Series

Not Supported

5520 Series

Not Supported

5720 Series

Not Supported

7520 Series

Not Supported

7720 Series

Not Supported

VSP 4450 Series

VSP 4000 4.0

VSP 4900 Series

VOSS 8.5

VSP 7200 Series

VOSS 4.2.1

VSP 7254XTQ only

VSP 7400 Series

Not Supported

VSP 8200 Series

VOSS 4.1

VSP 8400 Series

VOSS 4.2

VSP 8600 Series

Not Supported

XA1400 Series

Not Supported

MACsec 4AN mode (static)

5320 Series

Fabric Engine 8.6

5420 Series

VOSS 8.5

5520 Series

VOSS 8.2.5

  • 5520-24T and 5520-24W - all fixed ports except 1/25 and 1/26

  • 5520-12MW-36W, 5520-48SE, 5520-48T, and 5520-48W - all fixed ports except 1/49 and 1/50

  • VIMs: 5520-VIM-4XE and 5520-VIM-4YE only

5720 Series

Fabric Engine 8.7

  • 5720-24MW and 5720-24MXW - all fixed ports except 1/25 and 1/26

  • 5720-48MW and 5720-48MXW - all fixed ports except 1/49 and 1/50

  • VIMs: 5720-VIM-2CE and 5720-VIM-6YE

7520 Series

Not Supported

7720 Series

Not Supported

VSP 4450 Series

VOSS 6.0

VSP 4900 Series

VOSS 8.1

VSP 7200 Series

VOSS 6.0

VSP 7254XTQ only

VSP 7400 Series

Not Supported

VSP 8200 Series

VOSS 6.0

VSP 8400 Series

VOSS 6.0

VSP 8600 Series

VSP 8600 4.5

XA1400 Series

Not Supported

MACsec encryption cipher suites

5320 Series

Fabric Engine 8.6

Both 128 bits and 256 bits

5420 Series

VOSS 8.5

Both 128 bits and 256 bits

5520 Series

VOSS 8.2.5

  • 5520-24T and 5520-24W - all fixed ports except 1/25 and 1/26

  • 5520-12MW-36W, 5520-48SE, 5520-48T, and 5520-48W - all fixed ports except 1/49 and 1/50

  • VIMs: 5520-VIM-4XE and 5520-VIM-4YE only

5720 Series

Fabric Engine 8.7

  • 5720-24MW and 5720-24MXW - all fixed ports except 1/25 and 1/26

  • 5720-48MW and 5720-48MXW - all fixed ports except 1/49 and 1/50

  • VIMs: 5720-VIM-2CE and 5720-VIM-6YE

7520 Series

Not Supported

7720 Series

Not Supported

VSP 4450 Series

VOSS 8.1

128 bits only

VSP 4900 Series

VOSS 8.1

  • VSP4900-48P supports 128-bit on all fixed ports.

  • VSP4900-24XE supports 128-bit and 256-bit on all fixed ports.

  • VSP4900-12MXU-12XE supports 128-bit and 256-bit on the SFP+ ports.

  • VIM5-4XE and VIM5-4YE supports 128-bit and 256-bit cipher suite.

VSP 7200 Series

VOSS 8.1

128 bits only

VSP 7400 Series

Not Supported

VSP 8200 Series

VOSS 8.1

128 bits only

VSP 8400 Series

VOSS 8.1

128 bits only

VSP 8600 Series

VSP 8600 6.2

8624XS supports 128 bits only. 8606CQ supports 128 bits and 256 bits.

XA1400 Series

Not Supported

Automatic QoS priority for MACsec packets on intermediate switches

5320 Series

Fabric Engine 8.9

5420 Series

Fabric Engine 8.9

5520 Series

Fabric Engine 8.9

5720 Series

Fabric Engine 8.9

7520 Series

Fabric Engine 8.10

7720 Series

Fabric Engine 8.10

VSP 4450 Series

Not Supported

VSP 4900 Series

VOSS 8.9

VSP 7200 Series

VOSS 8.9

VSP 7400 Series

VOSS 8.9

VSP 8200 Series

VOSS 8.9

VSP 8400 Series

VOSS 8.9

VSP 8600 Series

Not Supported

XA1400 Series

Not Supported

MACsec Key Agreement (MKA)

5320 Series

Not Supported

5420 Series

Not Supported

5520 Series

VOSS 8.5

  • 5520-24T and 5520-24W

  • 5520-12MW-36W, 5520-48SE, 5520-48T, and 5520-48W

  • VIMs: 5520-VIM-4XE and 5520-VIM-4YE only

5720 Series

Fabric Engine 8.7

  • 5720-24MW and 5720-24MXW - all fixed ports except 1/25 and 1/26

  • 5720-48MW and 5720-48MXW - all fixed ports except 1/49 and 1/50

  • VIMs: 5720-VIM-2CE and 5720-VIM-6YE

7520 Series

Not Supported

7720 Series

Not Supported

VSP 4450 Series

Not Supported

VSP 4900 Series

VOSS 8.5

VSP 7200 Series

Not Supported

VSP 7400 Series

Not Supported

VSP 8200 Series

Not Supported

VSP 8400 Series

VOSS 8.1

VSP 8600 Series

VSP 8600 8.1

XA1400 Series

Not Supported