Feature History

The following table lists the new and modified features supported in the Layer 2 Configuration Guide in Cisco IOS XE 17 releases.

Feature Description

Cisco IOS XE Dublin 17.12.1

IGE MACsec with PTP support with A900-IMA8CS1Z-M

The 1GE MACsec with PTP supports configuration with Precision Time Protocol (PTP) packets to mitigate security vulnerabilities on the same router.

Cisco IOS XE Cupertino 17.8.1

10G MACSEC support with N560-IMA8Q/4L

The MACsec supports 10GE physical layer (PHY) interfaces for N560-IMA-8Q/4L interface module. From this release, MACsec encryption feature is supported on N560-IMA-8Q/4L interface module.

802.1AE WAN MACsec Enhancement for 1GE and 10GE A900-IMA8CS1Z-M

The 802.1AE WAN MACsec supports 10GE physical layer (PHY) interfaces for A900-IMA8CS1Z-M interface module. From this release, full HA, Power on Self Test (POST) and double tag support are available on A900-IMA8CS1Z-M interface module. The following new command is introduced:

show macsec post

Cisco IOS XE Bengaluru 17.6.1

802.1AE WAN MACsec for 1GE and 10GE A900-IMA8CS1Z-M

The WAN MACsec and MKA feature introduce MACsec support on WAN and uplink support and pre-shared key support for the MACsec Key Agreement protocol (MKA). The WAN MACsec supports 1GE and 10GE interfaces for A900-IMA8CS1Z-M interface module.

Cisco IOS XE Bengaluru 17.5.1

MAC Security

The MACsec and Macsec Key Agreement protocol (MKA) features are introduced on the main interface with pre-shared key support for the MKA.

This feature is supported on the Cisco RSP3 module.

Cisco IOS XE Amsterdam 17.3.1

RSPAN over VPLS Pseudowire Network

This feature allows the traffic mirroring destination port to be configured as a pseudowire rather than a physical port. This feature lets the designated traffic on the source port to be mirrored over the pseudowire to a remote location. This feature is supported on the Cisco RSP3 module.