MACsec licensing

Devices that support MACsec functionality can be enabled for MACsec by purchasing a MACsec license.
Note: MACsec is not supported on ICX 7150-ES and ICX 8100 devices.

There is no license capacity and no trial license associated with the MACsec license. The MACsec license works independently of Premium or PoD licenses already installed on ICX devices. In a stacking system, the MACsec license is required only for the specific units in the stacking system that enable MACsec and use the encryption capabilities at the port level. This MACsec license is not required for other units within the stacking system that do not enable MACsec.

The MACsec feature-related CLI commands are not controlled by the MACsec license. The MACsec preconfiguration commands and enabling commands are visible and available without a MACsec license. However, a valid MACsec license is required for the command to enable MACsec encryption at the port level on that device. When you enter the CLI command to enable MACsec at the port level without a MACsec license, the command does not execute, and an error message is displayed. The command enables MACsec encryption on that port only when a valid MACsec license is installed on the device.

In this section:

  1. Enabling and Configuring Group Interfaces for MACsec
    After MACsec is enabled for the device, each MACsec interface must be individually enabled, and a configured set of parameters must be applied.
  2. Verifying the MACsec license
    After installing the MACsec license on a supported device, you can verify the installation.
Parent topic: MACSec Key-Based Licensing