1 files changed, 5 insertions, 1 deletions
diff --git a/src/conf_mode/interfaces-macsec.py b/src/conf_mode/interfaces-macsec.py
index 874fd6d62..867df3eb6 100755
--- a/src/conf_mode/interfaces-macsec.py
+++ b/src/conf_mode/interfaces-macsec.py
@@ -29,7 +29,7 @@ from vyos import ConfigError
 default_config_data = {
     'address': [],
     'address_remove': [],
-    'cipher': 'gcm-aes-128',
+    'cipher': '',
     'deleted': False,
     'description': '',
     'disable': False,
@@ -111,6 +111,10 @@ def verify(macsec):
         raise ConfigError((
             f'Physical source interface must be set for MACsec "{macsec["intf"]}"'))
 
+    if not macsec['cipher']:
+        raise ConfigError((
+            f'Cipher suite is mandatory for MACsec "{macsec["intf"]}"'))
+
     if macsec['vrf']:
         if macsec['vrf'] not in interfaces():
             raise ConfigError(f'VRF "{macsec["vrf"]}" does not exist')