Wired Intelligent Edge

 View Only
last person joined: yesterday 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

No MACSec capable ports or lag's

Jump to Best Answer
This thread has been viewed 18 times
  • 1.  No MACSec capable ports or lag's

    Posted Jun 29, 2022 07:00 AM

    In the "AOS-CX 10.07 Security Guide(8xxx Switch Series" manual it states:

    "A MACsec policy can be applied to a physical interface port that is not part of any LAG ports or to a lag port."

    In the data sheet: Aruba CX 6300 Switch Series Data Sheet (arubanetworks.com), manual it states:

    Security:  MACsec with EAP-TLS

    In: AOS-CX 10.10.0002 Release Notes 6300, 6400 Switch Series, it states:

    • Enhancements for 6300 and 6400 Switches in AOS-CX 10.10.0002

    Security:              AOS-CX improvements enable EAP-TLS based MACsec. It is supported on select models

    with MACsec-enabled ports. (6300 Switch series only)

     

    MACsec               Support for switch-switch MACSec through PSK, dot1x supplicant instead of PSK, and

    dot1x authenticator to enable colorless port for MACSec. The feature is supported on

    select 6300 switches which have MACSec capable ports. (6300 Switch series only)

     

    In our: JL661A 6300M 48G CL4 PoE 4SFP56 Swch

    I am not allow either:

    (config-if)# interface 2/1/51

    (config-if)# apply macsec policy MACsec-policy

    MACsec is not supported on the interface.

    Nor:

    (config)# interface lag 1

    (config-lag-if)# apply macsec policy MACsec-policy

    MACsec is not supported on interfaces 1/1/52 that are members of the LAG.

    These interfaces will be blocked until either the MACsec policy is

    removed from the LAG or the interface is removed from the LAG.

    Continue (y/n)? n

     

    What am I missing..? please anyone



  • 2.  RE: No MACSec capable ports or lag's
    Best Answer

    EMPLOYEE
    Posted Jun 29, 2022 08:33 AM
    I've checked the 10.10 Security Guide for the platform (can be found here - https://www.arubanetworks.com/techdocs/AOS-CX/10.10/HTML/security_6200-6300-6400/Content/Chp_MACsec/mac-ll-10.htm ) and here what it says regarding MACsec support in 6300 series:


    Seems like JL661A does not have MACsec support.

    ------------------------------
    Ivan Bondar
    ------------------------------



  • 3.  RE: No MACSec capable ports or lag's

    Posted Jun 29, 2022 09:32 AM
    Yes, thanks, you are absolute right, however somewhat disappointed :(