Enable Static MACsec on a Port

Use the following procedure to enable MACsec with static Secure Association Keys (SAK) on a port.

Procedure

  1. Enter GigabitEthernet Interface Configuration mode:

    enable

    configure terminal

    interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

    Note

    Note

    If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

  2. Enable MACsec on the port:

    macsec enable

Variable Definitions

The following table defines parameters for the macsec enable command.

Variable Value
{slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}
Identifies the slot and port in one of the following formats:

  • a single slot and port (slot/port)

  • a range of slots and ports (slot/port-slot/port)

  • a series of slots and ports (slot/port,slot/port,slot/port)

  • all ports on the same slot (slot/all)

  • all ports on the switch (all)

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.
9039040-00 Rev AB