Fabric MACsec Keychain Policy

Location in GUI: Fabric » Fabric Policies » Policies » MACsec » MACsec KeyChain Policies

Diagram

Classes

apic

Name	Type	Constraint	Mandatory	Default Value
fabric_policies	Class	fabric_policies	No

fabric_policies (apic)

Name	Type	Constraint	Mandatory	Default Value
macsec_keychain_policies	List	macsec_keychain_policies	No

macsec_keychain_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
key_policies	List	key_policies	No

key_policies (apic.fabric_policies.macsec_keychain_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	No
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
key_name	String	Regex: ^[a-fA-F0-9]{0,64}$	Yes
pre_shared_key	String	Regex: ^[a-fA-F0-9]{0,64}$	Yes
start_time	Choice	now	No	now
end_time	Choice	infinite	No	infinite

Examples

apic:
  fabric_policies:
    macsec_keychain_policies:
      - name: fabric-macsec-keychain-1
        description: Fabric MACsec Keychain Policy
        type: fabric
        key_policies:
          - name: fabric-primary-key-spine
            description: Primary encryption key
            key_name: abcdef0123456789
            pre_shared_key: deadbeefcafebabefeedface12345678deadbeefcafebabefeedface12345678
            start_time: now
            end_time: infinite