Configuring A Macsec Policy - Cisco Nexus 9000 Series Configuration Manual
Nx-os security configuration guide, release 9.x
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (276 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Configuring MACsec
Command or Action
Step 4
(Optional) copy running-config startup-config
Example:
switch(config-if)# copy running-config
startup-config
Configuring a MACsec Policy
You can create multiple MACsec policies with different parameters. However, only one policy can be active
on an interface.
Note
Dynamic changes are not allowed to the MACsec policy once the policy is enabled under the interface.
Before you begin
Make sure that MACsec is enabled.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
configure terminal
macsec policy name
cipher-suite name
key-server-priority number
security-policy name
window-size number
sak-expiry-time time
conf-offset name
(Optional) show macsec policy
(Optional) copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Purpose
The command must be entered exactly the same
Note
as the existing configuration command for the
interface, except for the fallback keychain name.
See
Configuring a MACsec Keychain and
Copies the running configuration to the startup
configuration.
Purpose
Enters global configuration mode.
Configuring a MACsec Policy
Keys.
509
- Quick Links:
- Radius and Tacacs+ Security Protocols
Hide quick links:
Advertisement
Table of Contents
