Cisco Catalyst 4500 Series Configuration Manual page 34

Contents
Configuring MACsec Encryption
43
C H A P T E R
Configuring 802.1X Port-Based Authentication
44
C H A P T E R
Software Configuration Guide-Release IOS XE 3.3.0SG and IOS 15.1(1)SG
xxxii
Configuring a Layer 2 Interface as an Isolated PVLAN Trunk Port
Configuring a Layer 2 Interface as a Promiscuous PVLAN Trunk Port
Permitting Routing of Secondary VLAN Ingress Traffic
Configuring PVLAN over EtherChannel
Configuring a Layer 2 EtherChannel
Configuring a Layer 2 Etherchannel as a PVLAN Promiscuous Port
Configuring a Layer 2 EtherChannel as a PVLAN Host Port
Configuring a Layer 2 EtherChannel as an Isolated PVLAN Trunk Port
Configuring a Layer 2 Etherchannel as a Promiscuous PVLAN Trunk Port
Understanding Media Access Control Security
and MACsec Key Agreement
MKA Policies
43-3
Virtual Ports
43-3
MACsec
43-3
MACsec, MKA, and 802.1X Host Modes
Single-Host Mode
Multiple-Host Mode
MKA Statistics
43-5
Configuring MACsec and MKA
Default MACsec MKA Configuration
Configuring an MKA Policy
Configuring MACsec on an Interface
Understanding Cisco TrustSec MACsec
Configuring Cisco TrustSec MACsec
Configuring Cisco TrustSec Credentials on the Switch
Configuring Cisco TrustSec Switch-to-Switch Link Security in 802.1X Mode
Configuring Cisco TrustSec Switch-to-Switch Link Security in Manual Mode
Cisco TrustSec Switch-to-Switch Link Security Configuration Example
About 802.1X Port-Based Authentication
Device Roles
44-2
802.1X and Network Access Control
Authentication Initiation and Message Exchange
Ports in Authorized and Unauthorized States
802.1X Host Mode
44-6
Single-Host Mode
42-24
42-24
43-1
43-2
43-4
43-4
43-4
43-6
43-6
43-6
43-7
43-8
43-10
44-1
44-1
44-3
44-4
44-5
44-7
42-19
42-21
42-23
42-24
42-26
42-27
42-28
43-10
43-11
43-12
43-13
OL-25340-01