Xml Examples - Cisco Nexus 9000 Series Configuration Manual
Nx-os security configuration guide, release 9.x
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (276 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Configuring MACsec
switch(config)# show running-config macsec
!Command: show running-config macsec
!Time: Mon Dec
version 9.2(1)feature macsec
macsec policy 1
cipher-suite GCM-AES-256
key-server-priority 0
window-size 512
conf-offset CONF-OFFSET-0
security-policy should-secure
interface Ethernet2/13
macsec keychain 1 policy 1
interface Ethernet2/14
macsec keychain 1 policy 1
The following example shows how to configure a MACsec keychain and then add the system default MACsec
policy to the interfaces:
switch(config)# key chain 1 macsec
switch(config-macseckeychain)# key 1000
switch(config-macseckeychain-macseckey)# key-octet-string
abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789 cryptographic-algorithm
aes_256_CMAC
switch(config-macseckeychain-macseckey)# exit
switch(config)# int e2/13-14
switch(config-if-range)# macsec keychain 1
switch(config-if-range)# exit
switch(config)#
switch(config)# show running-config macsec
!Command: show running-config macsec
!Time: Mon Dec
version 7.0(3)I4(5)
feature macsec
interface Ethernet2/13
macsec keychain 1 policy system-default-macsec-policy
interface Ethernet2/14
macsec keychain 1 policy system-default-macsec-policy
switch(config)# show macsec mka session
Interface
-------------
Ethernet2/13
Ethernet2/14
switch(config)# show macsec mka summary
Interface
------------------ -------------------------------- ------------------------
Ethernet2/13
Ethernet2/14
XML Examples
MACsec supports XML output for the following show commands for scripting purposes using | xml:
5 04:53:40 2016
5 04:50:16 2016
Local-TxSCI
# Peers
---------------------- ---------- ---------- ------------------
006b.f1be.d31c/0001
1
006b.f1be.d320/0001
1
MACSEC-policy
system-default-macsec-policy
system-default-macsec-policy
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Status
Key-Server
Secured
Yes
Secured
No
Keychain
1/10000000000000000
1/10000000000000000
XML Examples
519
- Quick Links:
- Radius and Tacacs+ Security Protocols
Hide quick links:
Advertisement
Table of Contents
