Configures the include-SCI flag to ensure interoperability with third-party devices that do not decode encrypted MAC Security (MACsec) packets when the SCI is not present.
|include-sci||Provision inclusion of SCI in SecTAG field while transmitting MACsec frames.|
|enable||Include SCI in SecTAG.|
|disable||Do not include SCI in SecTAG (Default).|
|ports||Specifies configuring ports.|
|port_list||Lists which ports to configure the include-SCI flag on.|
Disabled by default (SCI is not included in MAC Security Tag (SecTAG)).
The SecTAG appended to each data packet contains an optional parameter called Secure Channel Indicator (SCI). The SCI is used to identify the sending Secure Association (SA) when the connectivity-association (CA) comprises three or more peers.
Because ExtremeXOS only supports point-to-point links (which have exactly two peers), the SCI is not sent by default (which saves 8-octets per SecTAG‘d packet). Certain third-party MACsec devices, such as the CentOS‘s MACsec client and Cisco Catalyst 3650, fail to decode encrypted MACsec packets when the SCI is not present. To ensure interoperability with such devices, you can configure the Include-SCI flag. When this flag is set, the port always includes the 8-octet SCI in the SecTAG of all outgoing packets.
ImportantAfter enabling MACsec, if you change the include-SCI flag, you must run the configure macsec initialize ports port_list command afterward. Otherwise, the change is not applied.
configure macsec include-sci enable port 13
# configure macsec include-sci disable port 44
This command was first available in ExtremeXOS 30.1.
This command is available on the following platforms.
NoteThe MACsec feature requires the installation of the MAC Security feature pack license.
|ExtremeSwitching 5320||All ports of all models except stacking ports.|
|ExtremeSwitching 5420||All ports of all models except stacking ports.|
|ExtremeSwitching 5520||All ports, except 5520-VIM-4X and 5520-24X 10G ports|
|ExtremeSwitching 5720||All ports of all models except stacking ports.|