K Commands

key-policy

key-policy <NUMBER>

Description: Configuration for Key Policy

Syntax:

<0-65535>

Id of the Key Policy. Number range from=0 to=65535

Command Mode: keychain-policy : Configuration for Keychain Policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# keychain-policy <WORD>
(config-tenant-keychainpolicy)# key-policy <NUMBER>

key-server-priority

key-server-priority <NUMBER>

Description: Configure the key server priority

Syntax:

<0-255>

priority. Number range from=0 to=255

Command Mode: template macsec access|fabric security-policy : Configure MAC security policy parameters

Command Path:


# configure [['terminal', 't']]
(config)# template macsec access|fabric security-policy <WORD>
(config-macsec-param)# key-server-priority <NUMBER>

key

key

Description: LDAP server key for authentication

Command Mode: ldap-server host : LDAP server DNS name or IP address

Command Path:


# configure [['terminal', 't']]
(config)# ldap-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# key

key

Description: RADIUS server key for authentication

Command Mode: radius-server host : RADIUS server's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# radius-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# key

key

Description: RSA server key for authentication

Command Mode: rsa-server host : RSA server's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# rsa-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# key

key

Description: TACACS server key for authentication

Command Mode: tacacs-server host : TACACS+ server's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# tacacs-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# key

key

Description: TACACS remote destination server key for authentication

Command Mode: remote-dest : TACACS Accounting remote destination's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# tacacslog-group <WORD>
(config-tacacslog-group)# remote-dest <A.B.C.D|A:B::C:D|WORD> port <port>
(config-remote-dest)# key

key <WORD>

Description: Configure CKN as hex string of max 64 characters

Syntax:

WORD

CKN as hex string (Max Size 64)

Command Mode: template macsec access|fabric keychain : Configure macsec key chain

Command Path:


# configure [['terminal', 't']]
(config)# template macsec access|fabric keychain <WORD>
(config-macsec-keychain)# key <WORD>

keychain-policy

keychain-policy <WORD>

Description: Configuration for Keychain Policy

Syntax:

WORD

Name of the KeyChain Policy (Max Size 64)

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# keychain-policy <WORD>

kubecontroller

kubecontroller <hostnameorIp>

Description: Configure an Kubernetes Controller in the Kubernetes domain

Syntax:

hostnameorIp

Command Mode: kubernetes-domain : Create a VMM Kubernetes Domain

Command Path:


# configure [['terminal', 't']]
(config)# kubernetes-domain <WORD> [delimiter <WORD>]
(config-kubernetesdomain)# kubecontroller <hostnameorIp>

kubernetes-domain

kubernetes-domain <WORD> [delimiter <WORD>]

Description: Create a VMM Kubernetes Domain

Syntax:

WORD

VMM Kubernetes Domain name

WORD

(Optional) Custom Delimiter

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# kubernetes-domain <WORD> [delimiter <WORD>]

kubernetes-domain member <WORD> [encap <WORD>] [primary-encap <WORD>] [deploy <WORD>] [push <WORD>] [delimiter <WORD>]

Description: Associate EPG to a Kubernetes Domain

Syntax:

member

Bind the EPG to a Kubernetes domain

WORD

Kubernetes Domain Name

WORD

(Optional) Enforce encap value. Secondary encap when EPG is isolated (For example vlan-10 or auto)

WORD

(Optional) Primary encap when EPG is isolated (For example vlan-11 or auto)

WORD

(Optional) Deployment mode

WORD

(Optional) Push mode

WORD

(Optional) Custom Delimiter

Command Mode: epg : AEPg configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# application <WORD>
(config-tenant-app)# epg <WORD> [type <WORD>]
(config-tenant-app-epg)# kubernetes-domain member <WORD> [encap <WORD>] [primary-encap <WORD>] [deploy <WORD>] [push <WORD>] [delimiter <WORD>]