Cisco Catalyst 4500 Series Software Configuration Manual page 44

Contents
Configuring MACsec and MACsec Key Agreement
Understanding MKA MACsec with EAP-TLS
Understanding Cisco TrustSec MACsec
Configuring Cisco TrustSec MACsec
Configuring 802.1X Port-Based Authentication
About 802.1X Port-Based Authentication
40
MACsec
48-4
MACsec, MKA, and 802.1X Host Modes
Single-Host Mode
48-5
Multiple-Host Mode
MKA Statistics
48-6
Default MKA MACsec Configuration
Configuring an MKA Policy
Configuring MACsec on an Interface
Configuring MKA Pre-Shared Key
Example: Connectivity Association Key Rekey
Prerequisites for MKA MACsec with EAP-TLS
Limitations for MKA MACsec with EAP-TLS
Understanding Certificate Enrollment
Generating RSA Key Pairs
Configuring Enrollment using SCEP
Configuring Manual Enrollment
Configuring MKA MACsec Using EAP-TLS
Configuring EAP-TLS and 802.1x Credentials
Configuring an Authentication Policy
Applying the 802.1x and MKA MACsec Configuration on Interfaces
Example: MKA MACsec Switch-to-Switch Configuration
Configuring Cisco TrustSec Credentials on the Switch
Configuring Cisco TrustSec Switch-to-Switch Link Security in 802.1X Mode
Configuring Cisco TrustSec Switch-to-Switch Link Security in Manual Mode
Cisco TrustSec Switch-to-Switch Link Security Configuration Example
Device Roles
49-2
802.1X and Network Access Control
Authentication Initiation and Message Exchange
Ports in Authorized and Unauthorized States
802.1X Host Mode
49-6
Single-Host Mode
49-7
Multiple-Hosts Mode
Multidomain Authentication Mode
48-5
48-5
48-7
48-7
48-7
48-8
48-10
48-10
48-11
48-11
48-11
48-12
48-13
48-13
48-14
48-15
48-15
48-16
48-19
48-21
49-1
49-1
49-3
49-4
49-4
49-7
49-7
Software Configuration Guide-Release IOS XE 3.9.xE and IOS 15.2(5)Ex
48-17
48-17
48-21
48-22
48-23
48-24