MKA configuration on a port-list

Syntax

[no] aaa port-access mka key-server-priority PRIORITY transmit-interval INTERVAL ethernet PORT-LIST

[no] aaa port-access <authenticator ...|supplicant ...web-based ...|mac-based ...|mka ...>

Configure the MACsec Key Agreement (MKA) protocol parameters.

Configure 802.1X (Port Based Network Access), MAC address based network access, or web authentication based network access or the MACsec Key Agreement (MKA) protocol on the device.

NOTE:

See the help for the commands aaa port-access authenticator, aaa port-access supplicant, aaa port-access mac-based, aaa port-access web-based for further details on authenticator, supplicant, MAC address based, and web authentication based network access configuration.

Syntax

aaa port-access mka key-server-priority transmit-interval <INTERVAL> [ethernet] PORT-LIST

Configure the MKA key server Priority. The key server priority is used by MKA protocol in selecting a key server. The participant with the lower server priority is selected as the key server. The default value is 16.

Syntax

aaa port-access mka key-server-priority 18

Configure the MKA transmit interval. MKA sends the periodic MKA protocol data unit (PDU) at this interval to the connected device to maintain MACsec connectivity on the link. The default value is 2 seconds.

Syntax

Configure the MACsec Key Agreement (MKA) protocol parameters.

aaa port-access mka

aaa port-access mka key-server-priority 18 transmit-interval

aaa port-access mka key-server-priority 18 transmit-interval 4

aaa port-access mka key-server-priority 18 transmit-interval 4 A1

aaa port-access mka key-server-priority

aaa port-access mka key-server-priority 5

aaa port-access mka key-server-priority 10 transmit-interval 6 a3

key-server-priority: Configure the MKA key server priority.
transmit-interval: Configure the MKA transmit interval.
0-31: Enter a Key Server priority value.
[ethernet] port-list: Enter a port number, a list of ports or 'all' for all ports.
transmit-interval: Configure the MKA transmit interval.
2-6: Enter a transmit interval value.
[ethernet] PORT-LIST: Enter a port number, a list of ports or 'all' for all ports.