Update the Connectivity Association for a port

Use the following procedure to change the Connectivity Association (CA) to which a port is associated.

Before you begin

Ensure that the new CA is created at the global level. For information about configuring a CA, see Configure a Connectivity Association.

Procedure

Enter GigabitEthernet Interface Configuration mode:

enable

configure terminal

interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...]}

Note

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.
Disable MACsec on the port:

no macsec enable
Change the CA to which the port is associated:

macsec connectivity-association WORD<5-16>
Enable MACsec on the port:

macsec enable

Example

Change the CA to which a port is associated:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface gigabit 1/2
Switch:1(config-if)#no macsec enable
Switch:1(config-if)#macsec connectivity-association caname12 
Switch:1(config-if)#macsec enable

Variable Definitions

The following table defines parameters for the macsec command.


Variable	Value
connectivity-association `WORD<5–16>`	Specifies a connectivity-association name. Tip: Configure the Connectivity Association key name (CKN) in multiples of 4 characters to avoid MKA interoperability issues between VOSS switches and EXOS switches. For example, Macsecma (8 chararcters) or Macsecmka123 (12 characters) are valid, but Macsec (6 characters) is not valid.

The following table defines parameters for the interface gigabitethernet command.


Variable	Value
{slot/port[/sub-port][-slot/port[/sub-port]][,...]}	Specifies the port to associate with the connectivity association (CA). Identifies the slot and port in one of the following formats: a single slot and port (slot/port), a range of slots and ports (slot/port-slot/port), or a series of slots and ports (slot/port,slot/port,slot/port). If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.