Sample MACsec Configuration
The following example shows how to
enable MACsec, configure general parameters, enable and configure interfaces, and
assign a key
that is shared with peers.
device# configure terminal device(config)# dot1x-mka-enable device(config-dot1x-mka)# mka-cfg-group test1 device(config-dot1x-mka-group-test1)# key-server-priority 5 device(config-dot1x-mka-group-test1)# macsec cipher-suite gcm-aes-128 device(config-dot1x-mka-group-test1)# macsec confidentiality-offset 30 device(config-dot1x-mka-group-test1)# macsec frame-validation strict device(config-dot1x-mka-group-test1)# macsec replay-protection strict device(config-dot1x-mka)# enable-mka ethernet 1/3/2 device(config-dot1x-mka-1/3/2)# mka-cfg-group test1 device(config-dot1x-mka-1/3/2)# pre-shared-key 135bd758b0ee5c11c55ff6ab19fdb199 key-name 96437a93ccf10d9dfe347846cce52c7d device(config-dot1x-mka-1/3/2)# exit device(config-dot1x-mka)# exit device(config)# exit