macsec:Policy
Macsec Policy Instance
Telemetry Sensor Path(s)
Configurable Properties
| PROPERTY NAME | DATA TYPE | DESCRIPTION | PERMITTED VALUES |
|---|---|---|---|
| cipherSuite | macsec:CipherSuite (scalar:Enum8) |
Cipher Suite for Macsec Policy | SELECTION: 1 - GCM-AES-128 2 - GCM-AES-256 3 - GCM-AES-XPN-128 4 - GCM-AES-XPN-256 DEFAULT: GCM-AES-XPN-256 |
| confOffset | macsec:ConfOffset (scalar:Enum8) |
Confidentiality Offset for Macsec Policy | SELECTION: 1 - CONF-OFFSET-0 2 - CONF-OFFSET-30 3 - CONF-OFFSET-50 DEFAULT: CONF-OFFSET-0 |
| includeIcvParam | macsec:IncludeIcvParam (scalar:Bool) |
Include ICV Indicator paramset in MKPDU for Macsec Policy | SELECTION: true or false DEFAULT: false |
| includeSci | macsec:IncludeSci (scalar:Bool) |
Include SCI in sectag for Macsec Policy | SELECTION: true or false DEFAULT: true |
| keySvrPrio | macsec:KeySvrPrio (scalar:UByte) |
Key Server Priority for Macsec Policy | RANGE: [0 , 255] DEFAULT: 16 |
| policyName | macsec:PolicyName (string:Basic) |
Name of Macsec Policy | A sequence of characters DEFAULT: system-default-macsec-policy |
| replayWindow | macsec:ReplayWindow (scalar:Uint32) |
Replay Window for Macsec Policy | RANGE: [0 , 596000000] DEFAULT: 148809600 |
| sakExpiryTime | macsec:SakExpiryTime (scalar:Uint32) |
Security Association Key Expiry Time for Macsec Policy | RANGE: [0 , 2592000] DEFAULT: pn-rollover |
| secPolicy | macsec:SecPolicy (scalar:Enum8) |
Security Policy for Macsec Policy | SELECTION: 0 - must-secure 1 - should-secure DEFAULT: should-secure |
Internal Properties
| PROPERTY NAME | DATA TYPE | DESCRIPTION | POSSIBLE VALUES |
|---|---|---|---|
| modTs | mo:TStamp (scalar:Date) |
The time when this object was last modified. | SELECTION: 0 - never DEFAULT: never |
| status | mo:ModificationStatus (scalar:Bitmask32) |
The upgrade status. This property is for internal use only. | SELECTION: 2 - created 4 - modified 8 - deleted 16 - replaced |