From 04d03f5bdd262bbf95f09e6ba3f211ab1d459573 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 21 May 2020 10:43:44 +0200
Subject: macsec: T2023: add optional encryption command

By default MACsec only authenticates traffic but has support for optional
encryption. Encryption can now be enabled using:

  set interfaces macsec <interface> encrypt
---
 interface-definitions/interfaces-macsec.xml.in | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'interface-definitions')

diff --git a/interface-definitions/interfaces-macsec.xml.in b/interface-definitions/interfaces-macsec.xml.in
index 79837dfb5..13448e758 100644
--- a/interface-definitions/interfaces-macsec.xml.in
+++ b/interface-definitions/interfaces-macsec.xml.in
@@ -36,6 +36,12 @@
               </constraint>
             </properties>
           </leafNode>
+          <leafNode name="encrypt">
+            <properties>
+              <help>Enable optional MACsec encryption</help>
+              <valueless/>
+            </properties>
+          </leafNode>
           #include <include/interface-description.xml.i>
           #include <include/interface-disable.xml.i>
           #include <include/interface-vrf.xml.i>
-- 
cgit v1.2.3