From fe9d399a4e78a1637cb3a693e0470eaec1dd5de5 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 20 May 2020 21:09:59 +0200
Subject: macsec: T2023: add initial XML and Python interfaces

---
 interface-definitions/interfaces-macsec.xml.in | 47 ++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 interface-definitions/interfaces-macsec.xml.in

(limited to 'interface-definitions')

diff --git a/interface-definitions/interfaces-macsec.xml.in b/interface-definitions/interfaces-macsec.xml.in
new file mode 100644
index 000000000..79837dfb5
--- /dev/null
+++ b/interface-definitions/interfaces-macsec.xml.in
@@ -0,0 +1,47 @@
+<?xml version="1.0"?>
+<interfaceDefinition>
+  <node name="interfaces">
+    <children>
+      <tagNode name="macsec" owner="${vyos_conf_scripts_dir}/interfaces-macsec.py">
+        <properties>
+          <help>MACsec Interface (802.1ae)</help>
+          <priority>319</priority>
+          <constraint>
+            <regex>^macsec[0-9]+$</regex>
+          </constraint>
+          <constraintErrorMessage>MACsec interface must be named macsecN</constraintErrorMessage>
+          <valueHelp>
+            <format>macsecN</format>
+            <description>MACsec interface name</description>
+          </valueHelp>
+        </properties>
+        <children>
+          #include <include/address-ipv4-ipv6.xml.i>
+          <leafNode name="cipher">
+            <properties>
+              <help>Cipher suite used (default: gcm-aes-128)</help>
+              <completionHelp>
+                <list>gcm-aes-128 gcm-aes-256</list>
+              </completionHelp>
+              <valueHelp>
+                <format>gcm-aes-128</format>
+                <description>Galois/Counter Mode of AES cipher with 128-bit key (default)</description>
+              </valueHelp>
+              <valueHelp>
+                <format>gcm-aes-256</format>
+                <description>Galois/Counter Mode of AES cipher with 256-bit key</description>
+              </valueHelp>
+              <constraint>
+                <regex>(gcm-aes-128|gcm-aes-256)</regex>
+              </constraint>
+            </properties>
+          </leafNode>
+          #include <include/interface-description.xml.i>
+          #include <include/interface-disable.xml.i>
+          #include <include/interface-vrf.xml.i>
+          #include <include/source-interface-ethernet.xml.i>
+        </children>
+      </tagNode>
+    </children>
+  </node>
+</interfaceDefinition>
-- 
cgit v1.2.3