Description

MAC Sec encryption issue:

 

> show log messages

May 25 14:45:00 newsyslog[30425]: logfile turned over due to size>256K

May 25 14:45:01 fpc0 PFE_SCI_INFO_MISSNG: macsec_ms_sc_info_get MACsec: Cannot find information for sci 0x0

May 25 14:45:01 fpc0 tvp_drv_bcm_macsec_tx_stats_get: [TVP-PIC-BCM] MACSEC Error in sc_info for ifd xe-0/0/14

May 25 14:45:01 fpc0 opus_macsec_get_stats: MACSec stats get failed for ifd xe-0/0/14

May 25 14:45:01 fpc0 eth_macsec_stats_get: Failed to fetch MACSec stats for xe-0/0/14

May 25 14:45:03 fpc0 PFE_SCI_INFO_MISSNG: macsec_ms_sc_info_get MACsec: Cannot find information for sci 0x0

May 25 14:45:03 fpc0 tvp_drv_bcm_macsec_tx_stats_get: [TVP-PIC-BCM] MACSEC Error in sc_info for ifd ge-0/0/6

May 25 14:45:03 fpc0 opus_macsec_get_stats: MACSec stats get failed for ifd ge-0/0/6

May 25 14:45:03 fpc0 eth_macsec_stats_get: Failed to fetch MACSec stats for ge-0/0/6

May 25 14:45:05 fpc0 PFE_SCI_INFO_MISSNG: macsec_ms_sc_info_get MACsec: Cannot find information for sci 0x0

May 25 14:45:05 fpc0 tvp_drv_bcm_macsec_tx_stats_get: [TVP-PIC-BCM] MACSEC Error in sc_info for ifd xe-0/0/14

May 25 14:45:05 fpc0 opus_macsec_get_stats: MACSec stats get failed for ifd xe-0/0/14

May 25 14:45:05 fpc0 eth_macsec_stats_get: Failed to fetch MACSec stats for xe-0/0/14

May 25 14:45:05 rpd[10006]: JTASK_IO_CONNECT_FAILED: AGENTD I/O.128.0.0.1+9500: Connecting to 128.0.0.1+9500 failed: Connection refused

May 25 14:45:08 PFE_SCI_INFO_MISSNG: macsec_ms_sc_info_get MACsec: Cannot find information for sci 0x0

Solution

For this scenario, please also remove any physical section which could be in the middle of the devices like a patch panel or layer 2 device. The issue seemed to be a connectivity association pre-shared key mismatch.

 

Please try using the following pre-shared keys for the ckn and cak in both ends.

 

[edit security macsec]

user@host# set connectivity-association ca1 pre-shared-key ckn 37c9c2c45ddd012aa5bc8ef284aa23ff6729ee2e4acb66e91fe34ba2cd9fe311

user@host# set connectivity-association ca1 pre-shared-key cak 228ef255aa23ff6729ee664acb66e91f

Modification History

2023-10-05