Fabric MACsec Parameters Policy

Location in GUI: Fabric » Fabric Policies » Policies » MACsec » Parameters

Diagram

Classes

fabric_policies (apic)

Name	Type	Constraint	Mandatory	Default Value
macsec_parameters_policies	List	`[macsec_parameters_policies]`	No

macsec_parameters_policies (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
description	String	Regex: `^[a-zA-Z0-9\\!#$%()*,-./:;@ _{\|}~?&+]{1,128}$`	No
cipher_suite	Choice	`gcm-aes-128`, `gcm-aes-256`, `gcm-aes-xpn-128`, `gcm-aes-xpn-256`	No	`gcm-aes-xpn-256`
confidentiality_offset	Choice	`offset-0`, `offset-30`, `offset-50`	No
key_server_priority	Integer	min: `0`, max: `255`	No
window_size	Integer	min: `0`, max: `4294967295`	No	`64`
key_expiry_time	Any	Choice[`disabled`] or Integer or Integer[min: `60`, max: `2592000`]	No	`disabled`
security_policy	Choice	`should-secure`, `must-secure`	No	`should-secure`

Examples

apic:
  fabric_policies:
    macsec_parameters_policies:
      - name: fabric-macsec-params-1
        description: Fabric MACsec Parameters Policy
        type: fabric
        cipher_suite: gcm-aes-xpn-256
        window_size: 2048
        key_expiry_time: 86400
        security_policy: must-secure