configure macsec hw-mode

configure macsec hw-mode ports port_list [macsec-mode | half-duplex-mode]


Sets MAC Security (MACsec) mode or half-duplex mode on ports 25–48 on ExtremeSwitching X460-G2-24p-24hp, X460-G2-24t-24ht, and 10/100/1000 ports on X465 switches.

Syntax Description

hw-mode Set the mutually exclusive hardware mode to MACsec or half-duplex.
ports Specify ports to configure.
port_list List of ports to configure.
macsec-mode Enable MACsec mode on the defined port list.
half-duplex-mode Enable half-duplex mode on the defined port list (Default).


Half-duplex mode is the default.

Usage Guidelines

This command sets the mutually exclusive modes for MACsec or half-duplex behavior on ExtremeSwitching X460-G2-24p-24hp, X460-G2-24t-24ht, and ExtemeSwitching X465 switches. To use MACsec, you must enable MACsec mode on these switches, since half-duplex mode is the default mode.

To configure half-duplex mode, you must remove any MACsec configuration from the specified ports. To configure MACsec mode, you must remove any half-duplex configuration from the specified ports.

You must save and reboot for this command to take effect.

To view your current mode setting, use the show macsec command.


The following example enables MACsec mode on an ExtremeSwitching X460-G2-24p-24hp switch on port 25:
# configure macsec hw-mode ports 25 macsec-mode
This command will only take effect after a save and reboot.

# save configuration
No default configuration database has been selected to boot up the system.
Save configuration will set the new configuration as the default database.

The configuration file primary.cfg already exists.
Do you want to save configuration to primary.cfg and overwrite it? (y/N) Yes
Saving configuration primary.cfg  on master ... done!
Synchronizing configuration to backup ....... done!
Saving configuration on Standbys (Slots: 1).......
Configuration saved on Standby (Slot 1): done!

The selected configuration file is now "primary.cfg". By default, this file will be used for saving the configuration which will take effect after the next switch reboot.

# reboot
Are you sure you want to reboot the stack? (y/N) Yes


This command was first available in ExtremeXOS 30.1.

Platform Availability

This command is available on the following platforms.



The MACsec feature requires the installation of the MAC Security feature pack license.
Platform Ports
ExtremeSwitching X460-G2-24p-24hp, X460-G2-24t-24ht switches Half-duplex, 1G ports (25–48)
ExtremeSwitching X465 10/100/1000 ports