macsec

macsec — MACSec Settings

Properties

Table 55. 

Key Name Value Type Default Value Value Description
encrypt
boolean
TRUE
Whether the transmitted traffic must be encrypted.
mka-cak
string
The pre-shared CAK (Connectivity Association Key) for MACsec Key Agreement. Must be a string of 32 hexadecimal characters.
mka-cak-flags
NMSettingSecretFlags (uint32)
Flags indicating how to handle the "mka-cak" property.
mka-ckn
string
The pre-shared CKN (Connectivity-association Key Name) for MACsec Key Agreement. Must be a string of hexadecimal characters with a even length between 2 and 64.
mode
int32
0
Specifies how the CAK (Connectivity Association Key) for MKA (MACsec Key Agreement) is obtained.
offload
int32
-1
Specifies the MACsec offload mode. 0 (off) disables MACsec offload. 1 (phy) and 2 (mac) request offload respectively to the PHY or to the MAC; if the selected mode is not available, the connection will fail. -1 (default) uses the global default value specified in NetworkManager configuration; if no global default is defined, the built-in default is 0 (off).
parent
string
If given, specifies the parent interface name or parent connection UUID from which this MACSEC interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property.
port
int32
1
The port component of the SCI (Secure Channel Identifier), between 1 and 65534.
send-sci
boolean
TRUE
Specifies whether the SCI (Secure Channel Identifier) is included in every packet.
validation
int32
2
Specifies the validation mode for incoming frames.