From 4ef110fd2c501b718344c72d495ad7e16d2bd465 Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Sat, 30 Dec 2023 23:25:20 +0100 Subject: T5474: establish common file name pattern for XML conf mode commands We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in --- interface-definitions/interfaces_macsec.xml.in | 153 +++++++++++++++++++++++++ 1 file changed, 153 insertions(+) create mode 100644 interface-definitions/interfaces_macsec.xml.in (limited to 'interface-definitions/interfaces_macsec.xml.in') diff --git a/interface-definitions/interfaces_macsec.xml.in b/interface-definitions/interfaces_macsec.xml.in new file mode 100644 index 000000000..d825f8262 --- /dev/null +++ b/interface-definitions/interfaces_macsec.xml.in @@ -0,0 +1,153 @@ + + + + + + + MACsec Interface (802.1ae) + 461 + + macsec[0-9]+ + + MACsec interface must be named macsecN + + macsecN + MACsec interface name + + + + #include + #include + #include + #include + #include + #include + + + Security/Encryption Settings + + + + + Cipher suite used + + gcm-aes-128 gcm-aes-256 + + + gcm-aes-128 + Galois/Counter Mode of AES cipher with 128-bit key + + + gcm-aes-256 + Galois/Counter Mode of AES cipher with 256-bit key + + + (gcm-aes-128|gcm-aes-256) + + + + + + Enable optional MACsec encryption + + + + + + Use static keys for MACsec [static Secure Authentication Key (SAK) mode] + + + #include + + + MACsec peer name + + [^ ]{1,100} + + MACsec peer name exceeds limit of 100 characters + + + #include + #include + #include + + + + + + + MACsec Key Agreement protocol (MKA) + + + + + Secure Connectivity Association Key + + txt + 16-byte (128-bit) hex-string (32 hex-digits) for gcm-aes-128 or 32-byte (256-bit) hex-string (64 hex-digits) for gcm-aes-256 + + + [A-Fa-f0-9]{32} + [A-Fa-f0-9]{64} + + + + + + Secure Connectivity Association Key Name + + txt + 1..32-bytes (8..256 bit) hex-string (2..64 hex-digits) + + + [A-Fa-f0-9]{2,64} + + + + + + Priority of MACsec Key Agreement protocol (MKA) actor + + u32:0-255 + MACsec Key Agreement protocol (MKA) priority + + + + + + 255 + + + + + + IEEE 802.1X/MACsec replay protection window + + u32:0 + No replay window, strict check + + + u32:1-4294967295 + Number of packets that could be misordered + + + + + + + + + #include + #include + #include + + 1460 + + #include + #include + #include + + + + + -- cgit v1.2.3