Skip to main content

MACsec Parameters Policy

Location in GUI: Fabric » Access Policies » Policies » Interface » MACsec » Parameters

Diagram

Classes

interface_policies (apic.access_policies)

NameTypeConstraintMandatoryDefault Value
macsec_parameters_policiesList[macsec_parameters_policies]No

macsec_parameters_policies (apic.access_policies.interface_policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
descriptionStringRegex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$No
cipher_suiteChoicegcm-aes-128, gcm-aes-256, gcm-aes-xpn-128, gcm-aes-xpn-256Nogcm-aes-xpn-256
confidentiality_offsetChoiceoffset-0, offset-30, offset-50Nooffset-0
key_server_priorityIntegermin: 0, max: 255No16
window_sizeIntegermin: 0, max: 4294967295No64
key_expiry_timeAnyChoice[unspecified] or Integer or Integer[min: 60, max: 2592000]Nodisabled
security_policyChoiceshould-secure, must-secureNoshould-secure

Examples

apic:
access_policies:
interface_policies:
macsec_parameters_policies:
- name: MACSEC_PARAM1
description: MACSEC parameters policy 1
confidentiality_offset: offset-30
key_server_priority: 128
cipher_suite: gcm-aes-256
window_size: 120
security_policy: must-secure