macsec:Policy

Macsec Policy Instance

Telemetry Sensor Path(s)
Configurable Properties
PROPERTY NAME DATA TYPE DESCRIPTION PERMITTED VALUES
allowedPeerCipherSuite1 macsec:AllowedPeerCipherSuite1
(scalar:Enum8)		 Cipher Suite for Macsec Policy SELECTION:
0 - None
1 - GCM-AES-128
2 - GCM-AES-256
3 - GCM-AES-XPN-128
4 - GCM-AES-XPN-256
DEFAULT: None
allowedPeerCipherSuite2 macsec:AllowedPeerCipherSuite2
(scalar:Enum8)		 Cipher Suite for Macsec Policy SELECTION:
0 - None
1 - GCM-AES-128
2 - GCM-AES-256
3 - GCM-AES-XPN-128
4 - GCM-AES-XPN-256
DEFAULT: None
allowedPeerCipherSuite3 macsec:AllowedPeerCipherSuite3
(scalar:Enum8)		 Cipher Suite for Macsec Policy SELECTION:
0 - None
1 - GCM-AES-128
2 - GCM-AES-256
3 - GCM-AES-XPN-128
4 - GCM-AES-XPN-256
DEFAULT: None
allowedPeerCipherSuite4 macsec:AllowedPeerCipherSuite4
(scalar:Enum8)		 Cipher Suite for Macsec Policy SELECTION:
0 - None
1 - GCM-AES-128
2 - GCM-AES-256
3 - GCM-AES-XPN-128
4 - GCM-AES-XPN-256
DEFAULT: None
cipherSuite macsec:CipherSuite
(scalar:Enum8)		 Cipher Suite for Macsec Policy SELECTION:
0 - enforce-peer
1 - GCM-AES-128
2 - GCM-AES-256
3 - GCM-AES-XPN-128
4 - GCM-AES-XPN-256
DEFAULT: GCM-AES-XPN-256
confOffset macsec:ConfOffset
(scalar:Enum8)		 Confidentiality Offset for Macsec Policy SELECTION:
1 - CONF-OFFSET-0
2 - CONF-OFFSET-30
3 - CONF-OFFSET-50
DEFAULT: CONF-OFFSET-0
cryptoPolicyName macsec:CryptoPolicyName
(string:Basic)		 Name of Crypto Profile Policy A sequence of characters
DEFAULT: None
includeIcvParam macsec:IncludeIcvParam
(scalar:Bool)		 Include ICV Indicator paramset in MKPDU for Macsec Policy SELECTION: true or false
DEFAULT: false
includeSci macsec:IncludeSci
(scalar:Bool)		 Include SCI in sectag for Macsec Policy SELECTION: true or false
DEFAULT: true
keySvrPrio macsec:KeySvrPrio
(scalar:UByte)		 Key Server Priority for Macsec Policy
RANGE: [0 , 255]
DEFAULT: 16
policyName macsec:PolicyName
(string:Basic)		 Name of Macsec Policy A sequence of characters
DEFAULT: system-default-macsec-policy
replayWindow macsec:ReplayWindow
(scalar:Uint32)		 Replay Window for Macsec Policy
RANGE: [0 , 596000000]
DEFAULT: 148809600
sakExpiryTime macsec:SakExpiryTime
(scalar:Uint32)		 Security Association Key Expiry Time for Macsec Policy
RANGE: [0 , 2592000]
DEFAULT: pn-rollover
secPolicy macsec:SecPolicy
(scalar:Enum8)		 Security Policy for Macsec Policy SELECTION:
0 - must-secure
1 - should-secure
DEFAULT: should-secure
Internal Properties
PROPERTY NAME DATA TYPE DESCRIPTION POSSIBLE VALUES
modTs mo:TStamp
(scalar:Date)		 The time when this object was last modified. SELECTION:
0 - never
DEFAULT: never
status mo:ModificationStatus
(scalar:Bitmask32)		 The upgrade status. This property is for internal use only. SELECTION:
2 - created
4 - modified
8 - deleted
16 - replaced