From 2005b6e98d66756eabd163d047e3ce4b365d4c30 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Fri, 22 May 2020 11:06:37 +0200
Subject: macsec: T2491: add replay window protection

---
 interface-definitions/interfaces-macsec.xml.in | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'interface-definitions')

diff --git a/interface-definitions/interfaces-macsec.xml.in b/interface-definitions/interfaces-macsec.xml.in
index 3bd0a6fd5..36605ab59 100644
--- a/interface-definitions/interfaces-macsec.xml.in
+++ b/interface-definitions/interfaces-macsec.xml.in
@@ -86,6 +86,22 @@
                   </leafNode>
                 </children>
               </node>
+              <leafNode name="replay-window">
+                <properties>
+                  <help>IEEE 802.1X/MACsec replay protection window</help>
+                  <valueHelp>
+                    <format>0</format>
+                    <description>No replay window, strict check</description>
+                  </valueHelp>
+                  <valueHelp>
+                    <format>1-4294967295</format>
+                    <description>Number of packets that could be misordered</description>
+                  </valueHelp>
+                  <constraint>
+                    <validator name="numeric" argument="--range 0-4294967295" />
+                  </constraint>
+                </properties>
+              </leafNode>
             </children>
           </node>
           #include <include/interface-description.xml.i>
-- 
cgit v1.2.3