Key-Octet-String - Cisco Nexus 7000 Series Command Reference Manual

key-octet-string

key-octet-string
To configure the text for a MACsec key, use the key-octet-string command. To remove the text, use the no
form of this command.
key-octet-string [0 | 7] key-octet-string cryptographic-algorithm {AES_128_CMAC | AES_256_CMAC}
no key-octet-string [0 | 7] key-octet-string cryptographic-algorithm {AES_128_CMAC | AES_256_CMAC}
Syntax Description
0
7
key-octet-string
cryptographic-algorithm
AES_128_CMAC
AES_256_CMAC
Command Default
The key octet string is not encrypted.
Command Modes
MACsec key configuration (config-macseckeychain-macseckey)
Command History
Release
8.2(1)
Cisco Nexus 7000 Series Security Command Reference
472
(Optional) Specifies the type of encryption to use.
The key-octet-string argument that you enter is
unencrypted text.
(Optional) Specifies the type of encryption to use.
The key-octet-string argument that you enter is
encrypted. The encryption method is a
Cisco-proprietary method. This option is useful when
you are entering a text string based on the encrypted
output of the show key chain command that you run
on another Cisco NX-OS device.
Text of the key octet string. The text is alphanumeric,
case sensitive, and can have up to 64 characters.
The text can have up to 130 characters for
Note
encryption type 7.
Specifies the Cipher-based Message Authentication
Code (CMAC) algorithm for authentication.
Configures the 128-bit AES encryption algorithm.
Configures the 256-bit AES encryption algorithm.
Modification
This command was introduced.
K Commands