macsec desire

Use macsec desire to enable MACsec desire. The port expects MACsec protection for outbound frames.

Use undo macsec desire to disable MACsec desire.

Syntax

macsec desire

undo macsec desire

Default

MACsec desire is disabled. A port does not expect MACsec protection for outbound frames.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command allows a MACsec port to expect MACsec protection for outbound frames. The key server determines whether MACsec protects the outbound frames.

MACsec protects the outbound frames of the port when the following requirements are met:

• The key server is MACsec capable.

• Both the local participant and its peer are MACsec capable.

• A minimum of one participant is enabled with the MACsec desire feature.

Examples

# Enable MACsec desire on Ten-GigabitEthernet 4/1/1.

<Sysname> system-view
[Sysname] interface ten-gigabitethernet 4/1/1
[Sysname-Ten-GigabitEthernet4/1/1] macsec desire