Issue with LRM/MACsec adapter after update

[jeronimo]

Hello,

I'm asking here because - astonishingly - GTAC is of not much help.

We upgraded some of our X690s from EXOS 30 to 31.7. We are using a LRM/MACsec adapter on ports 45 & 46.

We got a warning that the macsec adapter firmware was out of date: "LRM/MACsec Adapter port firmware on port 1:46 is out of date, do 'install firmware lrm-macsec-adapter' to update".

So we updated it, but I used the wrong port number. I issued the command "install firmware lrm-macsec-adapter port 1:45".

I do remember the message that update was successful, but right now, port 1:45 is no longer operational (blocking).

The only thing GTAC is asking is if we have used "per port configuration", I don't even know what that means.

I think that means they want us to also issue the command on port 1:46.

But they don't understand that I am hesitant to do this, as I would like to know beforehand if this is supposed to fix 1:45 or has the potential of also breaking 1:46.

They are referring to

https://extremeportal.force.com/ExtrArticleDetail?an=000078549

https://documentation.extremenetworks.com/exos_commands_32.1/GUID-49ECA67C-C3F7-4B19-8F39-BDC1B6ED25...

and

https://extremeportal.force.com/ExtrArticleDetail?an=000078783

Neither of which really answer my question.

Anyone have a clue?

Thanks,
Marki

[Adam_Minowski]

I assume you have somethng connected on port 1:46 as well, that's why you are so worried.
So if it's possible, move your configuration and uplink connection from 1:46 to other free and similarily capable port, to secure it. 

Then, without upgrading adapter on port 1:46 go with procedure for hotswap:
a. disable macsec on 1:45 (configure macsec connectivity-association <assocname> ports 1:45 disable)
b. unplug adapter from switch (power off adapter)
c. plug adapter back in
d. enable macsec (configure macsec connectivity-association <assocname> ports 1:45 enable)
e. check if macsec link is working
f. if yes, do the upgrade of macsec adapter on port 1:46
g. repeat points a-e
h. (optionally) bring back your second link to port 46