Disabling Eapol Configuration - Cisco Nexus 9000 Series Configuration Manual

Disabling EAPOL Configuration

Before you begin
Make sure that MACsec is enabled.
SUMMARY STEPS
1. configure terminal
2. interface name
3. eapol mac-address mac_address [ethertype eth_type]
4. eapol mac-address broadcast-address [ethertype eth_type]
5. (Optional) copy running-config startup-config
6. show macsec mka session detail
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 interface name
Example:
switch(config)# interface ethernet 1/1
switch(config-if)#
Step 3 eapol mac-address mac_address [ethertype eth_type]
Step 4 eapol mac-address broadcast-address [ethertype
eth_type]
Step 5
(Optional) copy running-config startup-config
Example:
switch(config-macseckeychain-macseckey)# copy
running-config startup-config
Step 6 show macsec mka session detail
Disabling EAPOL Configuration
You can disable the EAPOL configuration on any available interface.
SUMMARY STEPS
1. configure terminal
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
512
Purpose
Enters global configuration mode.
Specifies the interface that you are configuring. You can
specify the interface type and identity. For an Ethernet port,
use ethernet slot/port.
Enables the EAPOL configuration on the specified interface
type and identity.
If the ethernet type is not specified, the default
Note
ethernet type of MKA packets, which is 0x888e,
is considered.
Enables the broadcast address as the alternate mac address.
Copies the running configuration to the startup
configuration.
Displays the EAPOL settings.
Configuring MACsec