MACSEC enabled 1G interface with sfp SFP-SX remains down if peer device reboot or interface flap. With 10G SFP SFP+-10G-LR it works fine.

Xcvr 15 REV 02 111-222222 NAAAAA SFP-SX

This issue is specific to EX4600 having SFP-SX or SFP-T interface modules and when auto-negotiation and MACSec is enabled on the interfaces.

The interface may show as up and the transmit/receive counters will increase.This can be checked using CLI command 'show interfaces <interface> extensive'. 

The port statistics however would show no increase in transmit counters.

To check the affected 'port-name', please issue CLI command 'show dcbcm ifd all | grep <interface>'.

To check the transmit counter (statistics) of the affected port, Please issue command " show c <port-name>

This issue might be seen if the following conditions are met:

* On EX4600 platforms

* SFP-SX or SFP-T is used

* MACSec is enabled

* Auto-negotiation is enabled

AN must be disabled manually both side as by default the AN is enabled for macsec to work. PR for reference: PR-1598805