Cisco Nexus 9000 Series - XML Examples

switch(config)# show running-config macsec
!Command: show running-config macsec
!Time: Mon Dec 5 04:53:40 2016
version 9.2(1)feature macsec
macsec policy 1
cipher-suite GCM-AES-256
key-server-priority 0
window-size 512
conf-offset CONF-OFFSET-0
security-policy should-secure
interface Ethernet2/13
macsec keychain 1 policy 1
interface Ethernet2/14
macsec keychain 1 policy 1
The following example shows how to configure a MACsec keychain and then add the system default MACsec
policy to the interfaces:
switch(config)# key chain 1 macsec
switch(config-macseckeychain)# key 1000
switch(config-macseckeychain-macseckey)# key-octet-string
abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789 cryptographic-algorithm
aes_256_CMAC
switch(config-macseckeychain-macseckey)# exit
switch(config)# int e2/13-14
switch(config-if-range)# macsec keychain 1
switch(config-if-range)# exit
switch(config)#
switch(config)# show running-config macsec
!Command: show running-config macsec
!Time: Mon Dec 5 04:50:16 2016
version 7.0(3)I4(5)
feature macsec
interface Ethernet2/13
macsec keychain 1 policy system-default-macsec-policy
interface Ethernet2/14
macsec keychain 1 policy system-default-macsec-policy
switch(config)# show macsec mka session
Interface Local-TxSCI # Peers Status Key-Server
------------- ---------------------- ---------- ---------- ------------------
Ethernet2/13 006b.f1be.d31c/0001 1 Secured Yes
Ethernet2/14 006b.f1be.d320/0001 1 Secured No
switch(config)# show macsec mka summary
Interface MACSEC-policy Keychain
------------------ -------------------------------- ------------------------
Ethernet2/13 system-default-macsec-policy 1/10000000000000000
Ethernet2/14 system-default-macsec-policy 1/10000000000000000
XML Examples
MACsec supports XML output for the following show commands for scripting purposes using | xml:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
519
Configuring MACsec
XML Examples