Configuring the MKA key server priority

When you configure the MKA key server priority, follow these restrictions and guidelines:

• In client-oriented mode, the access device port automatically becomes the key server. You do not have to configure the MKA key server priority.

• In device-oriented mode, the port that has higher priority becomes the key server. The lower the priority value, the higher the priority. If a port and its peers have the same priority, MACsec compares the secure channel identifier (SCI) values on the ports. The port with the lowest SCI value (a combination of MAC address and port ID) becomes the key server.

• A port with priority 255 cannot become the key server. For a successful key server selection, make sure a minimum of one participant's key server priority is not 255.

1. Enter system view.

   system-view

2. Enter interface view.

   interface interface-type interface-number

3. Set the MKA key server priority.

   mka priority priority-value

   The default setting is 0.