Cisco Nexus 7000 Series - Page 499

Usage Guidelines
The key octet string is a shared secret. The device stores key strings in a secure format. You can obtain
encrypted key strings by using the show key chain command on another Cisco NX-OS device. This command
does not require a license. To use this command, you must enable the MKA feature.
Examples
This example shows how to set a key octet string:
switch# configure terminal
switch(config)# key chain k1 macsec
switch(config-macseckeychain)# key 03
switch(config-macseckeychain-macseckey)# key-octet-string 0123456789aabbcc0123456789aabbcc
cryptographic-algorithm AES_128_CMAC
switch(config-macseckeychain-macseckey)#
Related Commands
DescriptionCommand
Enables the MKA feature.feature mka
Creates a key or enters the configuration mode of an
existing key.
key
Creates a keychain or enters the configuration mode
of an existing keychain.
key chain keychain-name
Configures the MACsec keychain policy.macsec keychain policy
Configures the MACsec policy.macsec policy
Displays the configuration of the specified keychain.show key chain
Displays the details of MKA.show macsec mka
Displays all the MACsec policies in the system.show macsec policy
Displays the status of MKA.show run mka
Cisco Nexus 7000 Series Security Command Reference
473
K Commands
key-octet-string