MACsec Parameters Policy
Location in GUI:
Fabric
» Access Policies
» Policies
» Interface
» MACsec
» Parameters
Diagram
Classes
interface_policies (apic.access_policies)
Name | Type | Constraint | Mandatory | Default Value |
---|---|---|---|---|
macsec_parameters_policies | List | [macsec_parameters_policies] | No |
macsec_parameters_policies (apic.access_policies.interface_policies)
Name | Type | Constraint | Mandatory | Default Value |
---|---|---|---|---|
name | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | Yes | |
description | String | Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$ | No | |
cipher_suite | Choice | gcm-aes-128 , gcm-aes-256 , gcm-aes-xpn-128 , gcm-aes-xpn-256 | No | gcm-aes-xpn-256 |
confidentiality_offset | Choice | offset-0 , offset-30 , offset-50 | No | offset-0 |
key_server_priority | Integer | min: 0 , max: 255 | No | 16 |
window_size | Integer | min: 0 , max: 4294967295 | No | 64 |
key_expiry_time | Any | Choice[unspecified ] or Integer or Integer[min: 60 , max: 2592000 ] | No | disabled |
security_policy | Choice | should-secure , must-secure | No | should-secure |
Examples
apic:
access_policies:
interface_policies:
macsec_parameters_policies:
- name: MACSEC_PARAM1
description: MACSEC parameters policy 1
confidentiality_offset: offset-30
key_server_priority: 128
cipher_suite: gcm-aes-256
window_size: 120
security_policy: must-secure