summaryrefslogtreecommitdiff
path: root/docs/configuration/interfaces/macsec.rst
diff options
context:
space:
mode:
authorrebortg <github@ghlr.de>2023-01-20 22:16:53 +0100
committerrebortg <github@ghlr.de>2023-01-20 22:16:53 +0100
commit890c151dc318caf5bd9a7282ef1f83cd8ee51a3f (patch)
tree90f6411fd0cc409c1772f61d7a1f6c4169ae1a8b /docs/configuration/interfaces/macsec.rst
parentdee6c2445ef092f6c74c147833d85a211e5bb998 (diff)
downloadvyos-documentation-890c151dc318caf5bd9a7282ef1f83cd8ee51a3f.tar.gz
vyos-documentation-890c151dc318caf5bd9a7282ef1f83cd8ee51a3f.zip
macsec: polishing and proofread
Diffstat (limited to 'docs/configuration/interfaces/macsec.rst')
-rw-r--r--docs/configuration/interfaces/macsec.rst14
1 files changed, 6 insertions, 8 deletions
diff --git a/docs/configuration/interfaces/macsec.rst b/docs/configuration/interfaces/macsec.rst
index 6ee8f1fe..c56241c6 100644
--- a/docs/configuration/interfaces/macsec.rst
+++ b/docs/configuration/interfaces/macsec.rst
@@ -1,4 +1,4 @@
-:lastproofread: 2022-08-26
+:lastproofread: 2023-01-30
.. _macsec-interface:
@@ -29,14 +29,11 @@ Common interface configuration
MACsec options
==============
-.. cfgcmd:: set interfaces macsec <interface> security cipher [gcm-aes-128]
+.. cfgcmd:: set interfaces macsec <interface> security cipher <gcm-aes-128|gcm-aes-256>
Select cipher suite used for cryptographic operations. This setting is
mandatory.
- .. note:: gcm-aes-256 support planned once iproute2 package is updated to
- version >=5.2.
-
.. cfgcmd:: set interfaces macsec <interface> security encrypt
MACsec only provides authentication by default, encryption is optional. This
@@ -56,11 +53,12 @@ individual peers.
.. cfgcmd:: set interfaces macsec <interface> security mka cak <key>
IEEE 802.1X/MACsec pre-shared key mode. This allows configuring MACsec with
- a pre-shared key using a (CAK,CKN) pair.
+ a pre-shared key using a :abbr:`CAK (MACsec connectivity association key)` and
+ :abbr:`CKN (MACsec connectivity association name)` pair.
.. cfgcmd:: set interfaces macsec <interface> security mka ckn <key>
- CAK Name
+ :abbr:`CKN (MACsec connectivity association name)` key
.. cfgcmd:: set interfaces macsec <interface> security mka priority <priority>
@@ -104,7 +102,7 @@ Operation
.. opcmd:: show interfaces macsec
- List all MACsec interfaces
+ List all MACsec interfaces.
.. code-block:: none