Encrypted-credentials mode

As CAK is a key and needs to be protected, when in encrypt-credentials mode the value gets encrypted and stored in the configuration.

Syntax

[no] mode pre-shared-key ckn <CKN> encrypted-cak <ENC-CAK>
    

Configure the CA Key (CAK) of this MACsec policy in encrypted form. A CAK must be specified before the policy can be applied. The value is an encrypted string previously read from a compatible Networking device.

mode

Configure the mode of this MACsec policy.

CAK

Configure the CA Key (CAK) of this MACsec policy.

CKN

Configure the CA Key Name (CKN) of this MACsec policy.

encrypted-cak

Configure the CA Key (CAK) of the MACsec policy, specificed as a base64 encoded AES-256 encrypted string.