MACsec Configuration

In this section:

1. MACsec Overview
   Media Access Control Security (MACsec) is a Layer 2 security technology that provides point-to-point security on Ethernet links between nodes.
2. Configuring MACsec
   Although the MACsec configuration options outlined in this section are always visible, they cannot be applied unless an active license is present on the device and MACsec is enabled. MACsec licenses are required on a per-device basis. Each device in a stack requires a separate MACsec license.
3. Enabling MACsec and Configuring Group Parameters
   Enable MACsec globally on the device, and configure the MACsec Key Agreement (MKA) group before configuring MACsec security features for the group.
4. Enabling and Configuring Group Interfaces for MACsec
   After MACsec is enabled for the device, each MACsec interface must be individually enabled, and a configured set of parameters must be applied.
5. Sample MACsec Configuration
   The following example shows how to enable MACsec, configure general parameters, enable and configure interfaces, and create and assign a keychain module to an interface. The keychain module must also be assigned to peer interfaces.
6. Displaying MACsec Information