HPE FlexNetwork 5510 HI Series Macsec Configuration Guide

11
Task Command
Display MKA policy information.
display mka
{
default-policy
|
policy
[
name
policy-name ] }
Display MKA statistics on ports.
display mka statistics
[
interface
interface-type
interface-number ]
Reset MKA sessions on ports.
reset mka session
[
interface
interface-type
interface-number ]
Clear MKA statistics on ports.
reset mka statistics
[
interface
interface-type
interface-number ]
MACsec configuration examples
Client-oriented MACsec configuration example
Network requirements
As shown in Figure 5, the host accesses the network through GigabitEthernet 1/0/1. The device
performs RADIUS-based 802.1X authentication for the host to control user access to the Internet.
To ensure secure communication between the host and device, perform the following tasks on the
device:
• Enable MACsec desire, and configure MKA to negotiate SAKs for packet encryption.
• Set the MACsec confidentiality offset to 30 bytes.
• Enable MACsec replay protection, and set the replay protection window size to 100.
• Set the MACsec validation mode to strict.
Figure 5 Network diagram
Configuration procedure
1. Configure the RADIUS server to provide authentication, authorization, and accounting services.
Add a user account for the host. (Details not shown.)
2. Configure IP addresses for the Ethernet ports. (Details not shown.)
3. Configure AAA:
# Enter system view.
<Device> system-view
# Configure the RADIUS scheme radius1.
[Device] radius scheme radius1

HPE FlexNetwork 5510 HI Series Specifications

General

Model	HPE FlexNetwork 5510 HI Series
Category	Switch
Switch Type	Managed
Fans	Redundant fans
Layer	Layer 3
IPv6 Support	Yes
Warranty	Limited lifetime warranty
Power over Ethernet (PoE)	Available on some models (PoE+)
MAC Address Table Size	32, 000 entries
Routing Protocol	RIP, OSPF, BGP, IS-IS, Static Routing
Management	CLI, Web, SNMP
Operating Temperature	0°C to 45°C
Dimensions	440 x 400 x 44 mm
Input Voltage	100-240 VAC, 50/60 Hz
Memory and Processor	1 GB RAM, 1 GHz CPU
Operating Humidity	5% to 95% (non-condensing)
Security Features	ACL, 802.1X, RADIUS, TACACS+, SSH, SSL