MACsec Interface (802.1ae) 461 macsec[0-9]+ MACsec interface must be named macsecN macsecN MACsec interface name #include #include #include #include #include #include Security/Encryption Settings Cipher suite used gcm-aes-128 gcm-aes-256 gcm-aes-128 Galois/Counter Mode of AES cipher with 128-bit key gcm-aes-256 Galois/Counter Mode of AES cipher with 256-bit key (gcm-aes-128|gcm-aes-256) Enable optional MACsec encryption Use static keys for MACsec [static Secure Authentication Key (SAK) mode] #include MACsec peer name [^ ]{1,100} MACsec peer name exceeds limit of 100 characters #include #include #include MACsec Key Agreement protocol (MKA) Secure Connectivity Association Key txt 16-byte (128-bit) hex-string (32 hex-digits) for gcm-aes-128 or 32-byte (256-bit) hex-string (64 hex-digits) for gcm-aes-256 [A-Fa-f0-9]{32} [A-Fa-f0-9]{64} Secure Connectivity Association Key Name txt 1..32-bytes (8..256 bit) hex-string (2..64 hex-digits) [A-Fa-f0-9]{2,64} Priority of MACsec Key Agreement protocol (MKA) actor u32:0-255 MACsec Key Agreement protocol (MKA) priority 255 IEEE 802.1X/MACsec replay protection window u32:0 No replay window, strict check u32:1-4294967295 Number of packets that could be misordered #include #include #include 1460 #include #include #include