Users Guide

Switch Management Commands 2127
User Guidelines
When configuring multiple keys in a key chain with differing start/end times,
it is recommended to configure the lifetimes to overlap to ensure that the
session is not torn down and traffic dropped.
Command History
Command introduced in version 6.7.0 firmware.
macsec [network-link]
Use this command to enable MACsec on an interface. Use the no form of the
command to disable MACsec on the interface.
Syntax
macsec [network-link]
no macsec [network-link]
• network-link — Enable switch-to-switch MACsec on the interface.
Default Configuration
MACsec is disabled on all interfaces by default. The default MACsec mode
on an interface is host-to-switch.
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
If an MKA policy or key chain is to be used, configure and apply the policy or
key chain prior to enabling MACsec.
Command History
Command introduced in version 6.7.0 firmware.