macsec connectivity-association (globally)

Create and configure a connectivity-association (CA).

Note

Configure a CA name in multiples of 4 characters (4 bytes). If the total number of characters in a CA name is not a multiple of 4, it can create interoperability issues with EXOS or Switch Engine products.

Syntax

macsec connectivity-association WORD<5-32> connectivity-association-key WORD<10-64> [key-parity {even | odd}]
no macsec connectivity-association WORD<5-32> connectivity-association-key WORD<10-32>

Command Parameters

key-parity

Specifies Tx key parity using the following values:

even — generates even-numbered keys
odd — generates odd-numbered keys

If you do not specify a value for key-parity, the system defaults to 2 AN mode.

Note

This parameter only applies to static MACsec configurations.

WORD<10-64>

Specifies the connectivity-association key (CAK) value as a 32-character (128-bit) or a 64 character (256-bit) hexadecimal string.

WORD<5-32>

Specifies a new connectivity-association name as an alphanumeric string.

Default

None

Command Mode

Global Configuration

Usage Guidelines

This command does not apply to all hardware platforms. For more information about feature support, see Fabric Engine and VOSS Feature Support Matrix.