Upgrade Considerations for MACsec Licenses
MACsec Traffic
Beginning with FastIron release 09.0.10c, MACsec is no longer backward compatible with previous software versions. All connected devices must have FastIron release 09.0.10c or later for MACsec traffic to flow correctly.
Upgrading a System Without a Layer 3 Premium License from FastIron 08.0.70 or Earlier Releases
Layer 3 Premium licensed features are not available until the user has enabled the Layer 3 Premium SAU license. Without the Layer 3 Premium license, the Layer 3 licensed features cannot be used.
In an upgrade from FastIron 08.0.70 or earlier releases to FastIron 08.0.80 or later releases, the system enables the Layer 3 Base license package automatically, which means all Layer 3 premium features are disabled.
However, if the system does not have a Layer 3 Premium XML license and Layer 3 Premium features are configured, these L3 features will be lost after the upgrade. In order to avoid losing Layer 3 configurations, perform one of the following actions before or after the upgrade:
- Before upgrading the system, check the license compliance status. Purchase and install the Layer 3 Premium XML license on the device if needed. Always back up the configuration, and keep a backup of all license files.
- Before upgrading the system, back up the configuration. After the upgrade, enable the Layer 3 Premium SAU license and copy the configuration back to the system.
- After upgrading the system, immediately enable the Layer 3 Premium SAU license, but do not save the configuration, and then reload. After the system is back up, the Layer 3 Premium configuration should be back as it was before the upgrade.
In a stacking configuration, if Layer 3 licensed features are required then a valid Layer 3 Premium license must be installed on all members of the stack.
If the active unit has an XML Layer 3 Premium license installed, the Layer 3 Premium configuration should remain the same after the upgrade, but member units without a Layer 3 Premium XML license will enter a non-operational state. To prevent member units from becoming non-operational, copy the Layer 3 Premium XML license to relevant units before the upgrade, or enable the Layer 3 Premium SAU license on relevant units after the upgrade.
If the active unit does not have a Layer 3 Premium XML license, the configuration of any premium Layer 3 features will be lost after the upgrade. Use one of the three preceding methods to prevent the loss of or to recover the Layer 3 configuration.
ICX Device with an Existing Layer 3 Premium XML License
If there is an existing Layer 3 Premium XML license on the device, the system will automatically enable the Layer 3 Premium SAU license upon upgrade to 08.0.80, and Layer 3 feature configuration will be retained. All Layer 3 features will function as before the upgrade.
All XML license files will be preserved in case the device is loaded with a non-SAU license image (that is, in case of a downgrade).