To create a global PSK
Before you begin
Note: Distribution of a global PSK requires the allow-immediate parameter in the NE configuration to be set. If the parameter is set to no-allow-immediate, the PSK distribution will fail. See the NE documentation for more information about NE configuration.
Steps
1 |
Choose Manage → MACsec from the NFM-P main menu. The Manage MACsec form opens. |
2 |
Choose a connectivity association and click Properties. The Connectivity Association (Edit) form opens. Note: For 7705 SR, 7450 ESS, and 7950 XRS nodes only. For NFM-P 26.4 and later, or node releases 26.3 and later, the MKA Hello Interval and Key Server Priority attributes are listed in the General tab. For NFM-P releases earlier than 26.4, or node releases earlier than 26.3, the MKA Hello Interval and Key Server Priority attributes are listed in the Static CAK tab. |
3 |
Click on the Static CAK tab. |
4 |
Click Create and choose an encryption type. The PSK is created. The PSK will be automatically distributed to all the associated sites in the Connectivity Association. |
5 |
Close the forms. End of steps |