summaryrefslogtreecommitdiff
path: root/src/conf_mode/interfaces-macsec.py
diff options
context:
space:
mode:
Diffstat (limited to 'src/conf_mode/interfaces-macsec.py')
-rwxr-xr-xsrc/conf_mode/interfaces-macsec.py6
1 files changed, 5 insertions, 1 deletions
diff --git a/src/conf_mode/interfaces-macsec.py b/src/conf_mode/interfaces-macsec.py
index 874fd6d62..867df3eb6 100755
--- a/src/conf_mode/interfaces-macsec.py
+++ b/src/conf_mode/interfaces-macsec.py
@@ -29,7 +29,7 @@ from vyos import ConfigError
default_config_data = {
'address': [],
'address_remove': [],
- 'cipher': 'gcm-aes-128',
+ 'cipher': '',
'deleted': False,
'description': '',
'disable': False,
@@ -111,6 +111,10 @@ def verify(macsec):
raise ConfigError((
f'Physical source interface must be set for MACsec "{macsec["intf"]}"'))
+ if not macsec['cipher']:
+ raise ConfigError((
+ f'Cipher suite is mandatory for MACsec "{macsec["intf"]}"'))
+
if macsec['vrf']:
if macsec['vrf'] not in interfaces():
raise ConfigError(f'VRF "{macsec["vrf"]}" does not exist')