/system/macsec_policies/{name}

put

https://switch-ip/rest/v10.08/system/macsec_policies/{name}

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

name

string

required

Reference Resource: MACsec_Policy
Name of the MACsec policy.

Body Params

include_sci_disable

boolean

Disable inclusion of Secure Channel Identifier (SCI) in MACsec frames.

confidentiality_offset

string

enum

Number of octets in an Ethernet frame that are unencrypted. This is only applicable when confidentiality is enabled for this policy. byte_0: the entire Ethernet frame is sent encrypted. byte_30: the data following the first 30 bytes of the Ethernet frame is sent encrypted. byte_50: the data following the first 50 bytes of the Ethernet frame is sent encrypted.

Allowed:

replay_protect_disable

boolean

Disable replay protection on the MACsec interface.

replay_window

int64

0 to 4294967295

Replay protection window associated with this policy. When a packet is received, it is processed only if the Packet Number (PN) associated with this packet is within the replay window. This is only applicable if the replay protection is enabled for this policy.

cipher_suites

object

The MACsec cipher-suites to use to protect the MACsec frames. When more than one cipher-suite is enabled, the MKA instance will use the most secure cipher-suite in the list to generate the SAK when it is the key-server. If no specific cipher-suite is enabled, the switch will use the cipher-suites supported on the interface for MACsec.

confidentiality_disable

boolean

Disable encryption on the MACsec interface.

Responses

200

204

No Content

400

Bad Request

401

Unauthorized

403

Forbidden

404

Not Found

415

Unsupported Media Type

500

Internal Server Error

501

Not Implemented

503

Service Unavailable

Language

Loading…