Digi IX40 User Manual page 501

Virtual Private Networks (VPN)
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Name the tunnel. At the config prompt, type:
(config)> add vpn macsec name
(config)>
where name is a string.
4. Enable the tunnel:
(config vpn macsec tunnel1) enable true
(config vpn macsec tunnel1)>
5. Specify the local endpoint:
(config vpn macsec tunnel1) local value
(config vpn macsec tunnel1)>
where value is one of the available options.
6. Specify the security mode:
(config vpn macsec tunnel1) type value
(config vpn macsec tunnel1)>
where value is one of the following:
automatic: Uses a pre-shared key to generate association key information, which is
n
periodically rotated through using 802.1x.
manual: Uses connectivity association key information that is manually entered.
n
7. If you specified the manual security mode, enter the connectivity association key and key
name.
a. Specify the connectivity association key:
(config vpn macsec tunnel1) association cak value
(config vpn macsec tunnel1)>
where value is the association key. The key format is 16 hex digits.
b. Specify the connectivity association key name:
(config vpn macsec tunnel1) association ckn value
(config vpn macsec tunnel1)>
where value is the association key name. The key format is 32 hex digits.
IX40 User Guide
MACsec
501