Cisco TrustSec - Page 103

7-17
Cisco TrustSec Configuration Guide
OL-22192-01
Chapter 7 Cisco TrustSec Command Summary
cts manual
cts manual
Use the cts manual interface configuration command to enter the TrustSec manual interface
configuration submode.
cts manual
Syntax Description There is no syntax for this command
Defaults There is no default for this command.
Command Modes Interface configuration (config-if)
Supported User Roles Administrator
Command History
Usage Guidelines Use the cts manual interface configuration command to enter the TrustSec manual interface
configuration submode in which policies and the Security Association Protocol (SAP) are configured on
the link. If the sap or policy sub-commands are not configured, it is as if the interface is not configured
for TrustSec.
When cts manual mode is configured, 802.1X authentication is not performed on the link. Use the policy
subcommand to define and apply policy on the link. The default is no policy. To configure MACsec
link-to-link encryption, the SAP negotiation parameters must be defined. The default is no SAP. The
same SAP PMK should be configured on both sides of the link (that is, a shared secret).
Examples The following example demonstrates how to enter cts manual mode:
router# conf t
Enter configuration commands, one per line. End with CNTL/Z.
router(config)# interface giga 2/1
router(config-if)# cts manual
router(config-if-cts-manual)# ?
CTS manual configuration commands:
default Set a command to its defaults
exit Exit from CTS manual sub mode
no Negate a command or set its defaults
policy CTS policy for manual mode
propagate CTS SGT Propagation configuration for manual mode
sap CTS SAP configuration for manual mode
Release Modification
12.2(50) SY This command was introduced on the Catalyst 6500 Series Switches.