Switching Feature Pack Extreme X590 MACSEC license — EXTREME 17139 for X590 switching LRM

Switching Feature Pack Extreme X590 MACSEC license — EXTREME 17139 for X590 switching LRM is a software feature package that enables MAC Security (MACsec) on the Extreme X590 switching LRM platform. This license activates data‑plane encryption for Ethernet links between switches, providing link‑level protection of traffic integrity and confidentiality without changing existing network topologies or higher‑layer configurations.

Advantages

The MACsec feature delivers hardware‑accelerated line‑rate encryption and integrity checking on supported X590 switch ports, reducing the risk of on‑link attacks and eavesdropping. It integrates with existing switch management and policy frameworks, supports key exchange and secure channel establishment, and minimizes performance impact by offloading cryptographic operations to the switching silicon.

Suitable for

• Campus networks requiring secure links between access and aggregation switches
• Data center leaf‑spine environments where east‑west traffic protection is needed
• Enterprise networks that must protect sensitive traffic on physical Ethernet segments
• Sites subject to regulatory requirements for link‑level encryption

Key specifications

• Function: enables MACsec (IEEE 802.1AE) data‑plane encryption and integrity
• Platform compatibility: Extreme X590 switching LRM family
• Deployment: per‑platform software license to activate MACsec feature
• Performance: hardware‑assisted encryption to maintain line‑rate throughput on supported ports
• Interoperability: works with standard MACsec key management and cipher suites supported by the X590 platform

How to use

After installing the license on the target X590 switching LRM device, enable MACsec at the desired ports through the switch software management interface or CLI. Configure MACsec policies and key management parameters according to your network security policy, and verify secure association and SAK (Secure Association Key) exchange between peer ports. No changes are required to IP addressing or higher‑layer services; the feature operates transparently at layer 2.

Usage recommendations

Plan MACsec deployment on a per‑link basis, prioritizing links that carry sensitive or regulatory‑controlled data. Test interoperability with connected devices and ensure consistent key management across peer switches. Monitor CPU and port statistics after activation to confirm expected throughput and behavior.