Converting ICX 7450 Slot 2 Ports for MACsec or Stacking

When a 4x10GF module is installed in slot 2 of the ICX 7450, it is enabled for MACsec even if the ports have not been configured. To use these ports for stacking, you must reconfigure them.
Note: The ICX 7450 can support 4 X 10-Gbps stacking from slot 2 or 40-Gbps stacking from rear ports; however, it cannot support both at the same time.

By default, if a 4X10GF module is present in slot 2, it is enabled for MACsec. No reload or power-cycle is required to enable or disable MACsec on slot 2 interfaces. However, to use the slot 2 ports for stacking, the stacking ports must be changed, and the unit must be reloaded as described in Configuring 10-Gbps stacking ports on the ICX 7450.

If the 4X10GF module in slot 2 is programmed for stacking during bootup, MACsec cannot be configured on the ports until the stacking ports have been changed to rear panel ports and the unit has been reloaded or turned off and on.

MACsec and stacking cannot be configured at the same time on slot 2 interfaces. However, 4X10GF modules installed in slots 3 and 4 on the rear panel of the ICX 7450 can support MACsec at the same time that slot 2 is configured for 4X10GF stacking.

The following error message is displayed when MACsec is configured on slot 2 and you try to set the stacking ports to slot 2. 

Error - Please remove MACsec configuration from port <port_id> before using 4x10GF for stacking

If you try to use the stack enable command, the command is blocked, and the following message is displayed. 


Error - Please remove MACsec configuration from port <port_id> before using 4x10GF for stacking

The following error message is displayed if stacking is configured on these ports and you enter the enable-mka ethernet command for any of the ports. 

Error: MACsec is not allowed when 4x10GF module is used for stacking.
Please configure “stack-port” or “stack-trunk” to change stacking ports.

The following example reconfigures stacking ports on slot 2 for use as MACsec ports. 

ICX7450-48P Router# show running-config
Current configuration:
!
ver 08.0.90
!
stack unit 1
module 1 icx7450-48p-poe-management-module
module 2 icx7400-xgf-4port-40g-module
module 3 icx7400-qsfp-1port-40g-module
module 4 icx7400-qsfp-1port-40g-module
stack-port 1/2/1
stack-port 1/2/3
!
ICX7450-48P Router# configure terminal
ICX7450-48P Router(config)# dot1x-mka
ICX7450-48P Router(config-dot1x-mka)# enable-mka ethernet 1/2/1
Error: MACsec is not allowed when 4x10GF module is used for stacking.
Please configure “stack-port” or “stack-trunk” to change stacking ports.
ICX7450-48P Router(config-dot1x-mka)# exit
ICX7450-48P Router(config)#stack unit 1
ICX7450-48P Router(config-unit-1)# stack-port 1/3/1
stack-port 1/3/1 replaces stack-port 1/2/1 and stack-port 1/2/3
ICX7450-48P Router(config-unit-1)# stack-port 1/4/1
ICX7450-48P Router(config-unit-1)# show running-config
Current configuration:
!
ver 08.0.90
!
stack unit 1
module 1 icx7450-48p-poe-management-module
module 2 icx7400-xgf-4port-40g-module
module 3 icx7400-qsfp-1port-40g-module
module 4 icx7400-qsfp-1port-40g-module
stack-port 1/3/1
stack-port 1/4/1
!
ICX7450-48P Router(config-unit-1)# dot1x-mka
ICX7450-48P Router(config-dot1x-mka)# enable-mka ethernet 1/2/1
Reload required. Please write memory and then reload or power cycle.
Error: This 4x10GF module has been used for stacking. To enable MACsec on it, a reload is required
ICX7450-48P Router(config-dot1x-mka)# write memory
Flash Memory Write (8192 bytes per dot)
.
Write startup-config done.
Copy Done.
ICX7450-48P Router(config-dot1x-mka)# exit
ICX7450-48P Router(config)# exit
ICX7450-48P Router# reload
Are you sure? (enter 'y' or 'n'):
Parent topic: Configuring 10-Gbps Stacking Ports on ICX 7450 Devices