configure macsec mka life-time
Configures MAC Security (MACsec) lifetime for port(s).
|mka||Configures MACsec key agreement (MKA) parameters.|
|life-time||Designates setting the lifetime of potential and live peers. Expiration causes removal from a list, and higher intervals increase MKA protocol stability.|
|mka_life_time||Sets the lifetime of potential and live peers. Range is 6-30. Default is 6 seconds.|
|ports||Specifies configuring ports.|
|port_list||Lists which ports to configure the actor priority on.|
Default value for life-time 6 seconds.
If MACsec link flap occurs, loosen the
life-time equally on
both sides of the MACsec connection.
NoteMACsec link flap is likely to only occur on links connected to lower-end switches (the ExtremeSwitching X620 switch, for example).
ImportantAfter enabling MACsec, if you change the MKA lifetime, you must run the configure macsec initialize ports port_list command afterward. Otherwise, the change is not applied.
The following configures the MKA lifetime to 10 seconds on port 3:
# configure macsec mka life-time 10 port 3 # configure macsec initialize port 3
This command was first available in ExtremeXOS 31.5.
This command is available on the following platforms:
NoteThe MACsec feature requires the installation of the MAC Security feature pack license.
|ExtremeSwitching 5320||All ports of all models except stacking ports.|
|ExtremeSwitching 5420||All ports of all models except stacking ports.|
|ExtremeSwitching 5520||All ports, except 5520-VIM-4X and 5520-24X 10G ports|
|ExtremeSwitching 5720||All ports of all models except stacking ports.|