macsec: changing source-interface takes no effect
Closed, ResolvedPublicBUG
Actions

Assigned To

Authored By

	a.kudientsov
	Mar 17 2026, 3:31 PM

Description

Changing source-interface commits successfully, but the MACsec interface does not move to the new port.

set interfaces macsec macsec0 address '10.0.0.1/24'
set interfaces macsec macsec0 security cipher 'gcm-aes-128'
set interfaces macsec macsec0 security encrypt
set interfaces macsec macsec0 security mka cak '0123456789abcdef0123456789abcdef'
set interfaces macsec macsec0 security mka ckn '0123456789abcdef0123456789abcdef'

set interfaces macsec macsec0 source-interface 'eth0'
commit

vyos@vyos# ip link show macsec0
7: macsec0@eth0: <BROADCAST,MULTICAST> mtu 1460 qdisc noqueue state DOWN mode DEFAULT group default qlen 10
    link/ether 0c:c1:a0:05:00:00 brd ff:ff:ff:ff:ff:ff
[edit]

change source-interface:

set interfaces macsec macsec0 source-interface 'eth1'
commit

macsec0 still using eth0:

vyos@vyos# ip link show macsec0
7: macsec0@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1460 qdisc noqueue state UP mode DEFAULT group defa0
    link/ether 0c:c1:a0:05:00:00 brd ff:ff:ff:ff:ff:ff
[edit]