configure macsec mka actor-priority
Description
Configures MAC Security (MACsec) actor‘s priority for port(s).
Syntax Description
mka | Configures MACsec key agreement (MKA) parameters. |
actor-priority | Designates setting the priority advertised during MKA key server election. |
actor-priority | Sets the actor priority value. A lower value denotes higher priority.Range is 0–255 or 0x0–0xFF. Default is 0x10. |
ports | Specifies configuring ports. |
port_list | Lists which ports to configure the actor priority on. |
Default
Default value for actor priority is 0x10.
Usage Guidelines
Each MKA participant selects the participant advertising the highest priority as the
key server. In the event of a tie, the participant with the highest priority MAC
address (lowest value) is selected. The recommended priority range for
infrastructure ports is 0x00 to 0x1f, with a default of 0x10. You can assign the
full range of priorities, 0x00 to 0xff:
- To have a port become a key server, raise the priority by assigning a priority value less than 0x10.
- To not have a port become key server, lower the priority by assigning a priority value greater than 0x10.

Important
After enabling MACsec, if you change the actor priority, you must run the configure macsec initialize ports port_list command afterward. Otherwise, the change is not applied.Example
The following example raises the actor priority value to 0x5 on port
13:
# configure macsec mka actor-priority "0x5" port 13 # configure macsec initialize port 13
The following example lowers the actor priority value to "31" on port
14:
# configure macsec mka actor-priority 31 port 14 # configure macsec initialize port 14
History
This command was first available in ExtremeXOS 30.1.
Platform Availability
This command is available on the following platforms.

Note
The MACsec feature requires the installation of the MAC Security feature pack license.Platform | Ports |
---|---|
ExtremeSwitching 5320 | All ports of all models except stacking ports. |
ExtremeSwitching 5420 | All ports of all models except stacking ports. |
ExtremeSwitching 5520 | All ports, except 5520-VIM-4X and 5520-24X 10G ports |
ExtremeSwitching 5720 | All ports of all models except stacking ports. |