MACsec Keychain Policy

Location in GUI: Fabric » Access Policies » Policies » Interface » MACsec » MACsec KeyChain Policies

Diagram

Classes

interface_policies (apic.access_policies)

Name	Type	Constraint	Mandatory	Default Value
macsec_keychain_policies	List	[macsec_keychain_policies]	No

macsec_keychain_policies (apic.access_policies.interface_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
key_policies	List	[key_policies]	No

key_policies (apic.access_policies.interface_policies.macsec_keychain_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	No
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
key_name	String	Regex: ^[a-fA-F0-9]{0,64}$	Yes
pre_shared_key	String	Regex: ^[a-fA-F0-9]{0,64}$	Yes
start_time	Choice	now	No	now
end_time	Choice	infinite	No	infinite

Examples

apic:
  access_policies:
    interface_policies:
      macsec_keychain_policies:
        - name: MACSEC_KEYCHAIN1
          description: MACSEC Keychain policy 1
          key_policies:
            - name: keypolicy1
              description: Key Policy description
              key_name: abcd1234
              pre_shared_key: abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234
              start_time: now
              end_time: '2026-07-31T16:32:21'