Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

TrustSec on WS-C3850-24T

Hi,

 

I want do configure a switch-to-switch link security. (manual mode) on a Cisco 3850 IP-Base.

But under "sap .. mode-list" the only entry is: no-encap

I need gcm-encrypt but this option is not displayed.

 

SW Version: 03.06.00E

SW Image: cat3k_caa-universalk9

License Level: Ipbase

Model: WS-C3850-24T

 

What could be the problem?

 

Best Regards

 

 

  • LAN Switching and Routing
Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Purple

The 3850 hardware is capable

The 3850 hardware is capable of MACSec, but it's not yet implemented in the software:

This is from the 3850 Q&A:

Q.    What about service modules for the Cisco Catalyst 3850? 
A.     There are no service modules for the Cisco Catalyst 3850. Features supported through the service module in the 3750-X (including Flexible NetFlow and MACsec *) are natively supported by the Cisco Catalyst 3850. 
* MACsec software support might be added later as part of a software update.
-- Don't stop after you've improved your network! Improve the world by lending money to the working poor: http://www.kiva.org/invitedby/karsteni
2 REPLIES
VIP Purple

The 3850 hardware is capable

The 3850 hardware is capable of MACSec, but it's not yet implemented in the software:

This is from the 3850 Q&A:

Q.    What about service modules for the Cisco Catalyst 3850? 
A.     There are no service modules for the Cisco Catalyst 3850. Features supported through the service module in the 3750-X (including Flexible NetFlow and MACsec *) are natively supported by the Cisco Catalyst 3850. 
* MACsec software support might be added later as part of a software update.
-- Don't stop after you've improved your network! Improve the world by lending money to the working poor: http://www.kiva.org/invitedby/karsteni
New Member

There is a MACsec feature on

There is a MACsec feature on 3850 series switches but you are going to need at least 03.07.xxE IOS code. Please update IOS image and you will find gmac, gcm-encrypt and null options under sap mode-list. 

108
Views
5
Helpful
2
Replies