2-389
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
mka default-policy
mka default-policy
To apply the MACsec Key Agreement (MKA) protocol default policy on an interface, use the mka
default-policy interface configuration command. This command also enables MKA on the interface if
no MKAs were applied. To disable MKA on the interface and clear any active MKA policies running on
the interface, use the no form of this command.
mka default-policy
no mka default-policy
Syntax Description This command has no arguments or keywords.
Defaults The MKA default policy is not applied. MKA is not enabled.
Command Modes Interface configuration
Command History
Usage Guidelines If another MKA policy is already applied to an interface, entering this command clears all active MKA
sessions running on the interface.
If the MKA default policy has already been applied to the interface, you are notified, and no sessions are
cleared.
To remove any MKA policy from the interface, including the default, enter the no mka policy interface
configuration command.
Examples This example shows what you see if you apply the default policy to an interface that already has a policy
applied:
Switch(config)# interface gigabitethernet 1/0/6
Switch(config-if)# mka policy my_policy
Switch(config-if)# mka default-policy
%MKA policy change has cleared all MKA Sessions on this interface.
You can verify your setting by entering the show mka default-policy privileged EXEC command.
Related Commands
Release Modification
12.2(53)SE2 This command was introduced.
Command Description
show mka default-policy Displays information about the MACsec Key Agreement Protocol
default policy.