/system/macsec_policies

post

https://switch-ip/rest/v10.04/system/macsec_policies

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

replay_window

int64

0 to 4294967295

Replay protection window associated with this policy. When a packet is received, it is processed only if the Packet Number (PN) associated with this packet is within the replay window. This is only applicable if the replay protection is enabled for this policy.

include_sci_disable

boolean

Disable inclusion of Secure Channel Identifier (SCI) in MACsec frames.

cipher_suites

object

The MACsec cipher-suites to use to protect the MACsec frames. When more than one cipher-suite is enabled, the MKA instance will use the most secure cipher-suite in the list to generate the SAK when it is the key-server. If no specific cipher-suite is enabled, the switch will use the cipher-suites supported on the interface for MACsec.

origin

string

enum

Origin of the MACsec policy, i.e., how the policy is provisioned: static: policy is provisioned by the administrator via CLI or REST. dynamic: policy is provisioned based on attributes provided by the RADIUS server.

Allowed:

confidentiality_offset

string

enum

Number of octets in an Ethernet frame that are unencrypted. This is only applicable when confidentiality is enabled for this policy. byte_0: the entire Ethernet frame is sent encrypted. byte_30: the data following the first 30 bytes of the Ethernet frame is sent encrypted. byte_50: the data following the first 50 bytes of the Ethernet frame is sent encrypted.

Allowed:

name

string

required

length between 1 and 32

Reference Resource: MACsec_Policy
Name of the MACsec policy.

replay_protect_disable

boolean

Disable replay protection on the MACsec interface.

confidentiality_disable

boolean

Disable encryption on the MACsec interface.

Responses

201

Created

400

Bad Request

401

Unauthorized

403

Forbidden

404

Not Found

415

Unsupported Media Type

500

Internal Server Error

501

Not Implemented

503

Service Unavailable

Language

Loading…

Response

Click Try It! to start a request and see the response here!