To configure a global MACsec connectivity association
Purpose
Perform this procedure to create a connectivity association for HSM key management.
Note: Before you can use an HSM for key management, you must add the HSM to the NFM-P configuration; see the procedure to add an HSM to the NFM-P in the NSP System Administrator Guide.
Note: The NFM-P does not store CAKs generated by an HSM.
Steps
1 |
Choose Manage → MACsec from the NFM-P main menu. The Manage MACsec form opens. |
2 |
Click Create → Connectivity Association, or choose a connectivity association and click Properties. The Connectivity Association (Create|Edit) form opens. |
3 |
Configure the required General parameters. |
4 |
In the Keying Parameters panel, configure the Key Source parameter. If you choose HSM, click the Select button and select an HSM. |
5 |
Configure the required parameters for Static CAK. |
6 |
Close the forms. End of steps |