Media Access Control Security

In this section:

  1. MACsec Overview
    Media Access Control Security (MACsec) is a Layer 2 security technology that provides point-to-point security on Ethernet links between nodes.
  2. How MACsec Works
    MACsec capabilities prevent Layer 2 security threats, such as passive wiretapping, denial of service, intrusion, man-in-the-middle, and playback attacks.
  3. Configuring MACsec
    Although the MACsec configuration options outlined in this section are always visible, they cannot be applied unless an active license is present on the device and MACsec is enabled. MACsec licenses are required on a per-device basis. Each device in a stack requires a separate MACsec license.
  4. Enabling MACsec and Configuring Group Parameters
    Enable MACsec globally on the device, and configure the MACsec Key Agreement (MKA) group before configuring MACsec security features for the group.
  5. Enabling and Configuring Group Interfaces for MACsec
    After MACsec is enabled for the device, each MACsec interface must be individually enabled, and a configured group of parameters must be applied.
  6. Sample MACsec Configuration
    The following example shows how to enable MACsec, configure general parameters, enable and configure interfaces, and assign a key that is shared with peers.
  7. Displaying MACsec Information