Cisco Nexus 7000 Series Command Reference Manual page 499

K Commands
Usage Guidelines
The key octet string is a shared secret. The device stores key strings in a secure format. You can obtain
encrypted key strings by using the show key chain command on another Cisco NX-OS device. This command
does not require a license. To use this command, you must enable the MKA feature.
Examples
This example shows how to set a key octet string:
switch# configure terminal
switch(config)# key chain k1 macsec
switch(config-macseckeychain)# key 03
switch(config-macseckeychain-macseckey)# key-octet-string 0123456789aabbcc0123456789aabbcc
cryptographic-algorithm AES_128_CMAC
switch(config-macseckeychain-macseckey)#
Related Commands
Command
feature mka
key
key chain keychain-name
macsec keychain policy
macsec policy
show key chain
show macsec mka
show macsec policy
show run mka
Description
Enables the MKA feature.
Creates a key or enters the configuration mode of an
existing key.
Creates a keychain or enters the configuration mode
of an existing keychain.
Configures the MACsec keychain policy.
Configures the MACsec policy.
Displays the configuration of the specified keychain.
Displays the details of MKA.
Displays all the MACsec policies in the system.
Displays the status of MKA.
Cisco Nexus 7000 Series Security Command Reference
key-octet-string
473