Enable MKA on a Port

Before you begin

  • Apply an MKA profile to the port.

  • Before you enable MKA on a port, the port must be a member of a connectivity association.

Procedure

  1. Enter GigabitEthernet Interface Configuration mode:

    enable

    configure terminal

    interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

    Note

    Note

    If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

  2. Enable MKA on a port:

    macsec mka enable

Example

Switch:1#enable
Switch:1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch:1(config)#interface gigabitEthernet 1/3
Switch:1(config-if)#macsec mka enable

Variable Definitions

The following table defines parameters for the macsec mka enable command.

Variable Value
{slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}
Identifies the slot and port in one of the following formats:
  • a single slot and port (slot/port)

  • a range of slots and ports (slot/port-slot/port)

  • a series of slots and ports (slot/port,slot/port,slot/port)

  • all ports on the same slot (slot/all)

  • all ports on the switch (all)

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.