! interface GigabitEthernet0/0/0 no ip address negotiation auto macsec dot1q-in-clear 1 service instance 10 ethernet encapsulation dot1q 20 mka pre-shared-key key-chain kc1 eapol eth-type 876F eapol destination-address broadcast-address macsec bridge-domain 10 ! service instance 18 ethernet encapsulation dot1q 21 mka pre-shared-key key-chain kc1 eapol eth-type 876F eapol destination-address broadcast-address macsec bridge-domain 18 ! ! interface GigabitEthernet0/0/1 no ip address negotiation auto service instance 10 ethernet encapsulation dot1q 10 rewrite ingress tag push dot1q 20 symmetric bridge-domain 10 ! service instance 18 ethernet