Cisco TrustSec Configuration Manual page 103

Chapter 7 Cisco TrustSec Command Summary
cts manual
Use the cts manual interface configuration command to enter the TrustSec manual interface
configuration submode.
Syntax Description There is no syntax for this command
Defaults
There is no default for this command.
Command Modes
Interface configuration (config-if)
Supported User Roles Administrator
Command History Release
12.2(50) SY
Usage Guidelines Use the cts manual interface configuration command to enter the TrustSec manual interface
configuration submode in which policies and the Security Association Protocol (SAP) are configured on
the link. If the sap or policy sub-commands are not configured, it is as if the interface is not configured
for TrustSec.
When cts manual mode is configured, 802.1X authentication is not performed on the link. Use the policy
subcommand to define and apply policy on the link. The default is no policy. To configure MACsec
link-to-link encryption, the SAP negotiation parameters must be defined. The default is no SAP. The
same SAP PMK should be configured on both sides of the link (that is, a shared secret).
Examples The following example demonstrates how to enter cts manual mode:
router# conf t
Enter configuration commands, one per line.
router(config)# interface giga 2/1
router(config-if)# cts manual
router(config-if-cts-manual)# ?
CTS manual configuration commands:
default
exit
no
policy
propagate
sap
OL-22192-01
cts manual
Modification
This command was introduced on the Catalyst 6500 Series Switches.
Set a command to its defaults
Exit from CTS manual sub mode
Negate a command or set its defaults
CTS policy for manual mode
CTS SGT Propagation configuration for manual mode
CTS SAP configuration for manual mode
End with CNTL/Z.
Cisco TrustSec Configuration Guide
cts manual
7-17