Skip to content

Conversation

rajshekhar-nexthop
Copy link

@rajshekhar-nexthop rajshekhar-nexthop commented Sep 19, 2025

On gearbox ports, creating MACsec on the PHY switch fails (SAI_STATUS_NOT_IMPLEMENTED) if gearbox PHY does not have the MACsec engine. To resolve this, introduce a platform capability flag in the gearbox config to determine, per PHY, whether MACsec is supported (applies to all ports mapped to that PHY).
MACsec orchestration will:

  • Use PHY switch by default on gearbox ports
  • Use NPU/global switch only when the platform marks the PHY as not supporting MACsec

Code changes PR: sonic-net/sonic-swss#3926

@mssonicbld
Copy link
Collaborator

/azp run

Copy link

No pipelines are associated with this pull request.

@rajshekhar-nexthop rajshekhar-nexthop force-pushed the rajshekhar.no-iss.macsec_gearbox_hld branch from 7e40f37 to 2f78a99 Compare September 19, 2025 11:55
@mssonicbld
Copy link
Collaborator

/azp run

Copy link

No pipelines are associated with this pull request.

@rajshekhar-nexthop rajshekhar-nexthop changed the title NO-ISS: HLD - Deterministic MACsec backend selection for gearbox ports HLD - Deterministic MACsec backend selection for gearbox ports Sep 24, 2025
@rajshekhar-nexthop rajshekhar-nexthop marked this pull request as ready for review September 24, 2025 13:17
@mssonicbld
Copy link
Collaborator

/azp run

Copy link

No pipelines are associated with this pull request.

@rajshekhar-nexthop rajshekhar-nexthop force-pushed the rajshekhar.no-iss.macsec_gearbox_hld branch from c6995a9 to c8767f2 Compare September 24, 2025 16:39
@mssonicbld
Copy link
Collaborator

/azp run

Copy link

No pipelines are associated with this pull request.

@rajshekhar-nexthop rajshekhar-nexthop force-pushed the rajshekhar.no-iss.macsec_gearbox_hld branch from c8767f2 to 5711c3b Compare October 9, 2025 08:13
@mssonicbld
Copy link
Collaborator

/azp run

Copy link

No pipelines are associated with this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants