encrypt  | 
boolean  | 
TRUE  | 
Whether the transmitted traffic must be encrypted. | 
mka-cak  | 
string  | 
 | 
The pre-shared CAK (Connectivity Association Key) for MACsec Key Agreement. Must be a string of 32 hexadecimal characters. | 
mka-cak-flags  | 
NMSettingSecretFlags (uint32)  | 
 | 
Flags indicating how to handle the "mka-cak" property. | 
mka-ckn  | 
string  | 
 | 
The pre-shared CKN (Connectivity-association Key Name) for MACsec Key Agreement. Must be a string of hexadecimal characters with a even length between 2 and 64. | 
mode  | 
int32  | 
0  | 
Specifies how the CAK (Connectivity Association Key) for MKA (MACsec Key Agreement) is obtained. | 
offload  | 
int32  | 
-1  | 
Specifies the MACsec offload mode.
0 (off) disables MACsec offload.
1 (phy) and 2 (mac) request offload respectively to the PHY or to the MAC; if the selected mode is not available, the connection will fail.
-1 (default) uses the global default value specified in NetworkManager configuration; if no global default is defined, the built-in default is 0 (off). | 
parent  | 
string  | 
 | 
If given, specifies the parent interface name or parent connection UUID from which this MACSEC interface should be created.  If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property. | 
port  | 
int32  | 
1  | 
The port component of the SCI (Secure Channel Identifier), between 1 and 65534. | 
send-sci  | 
boolean  | 
TRUE  | 
Specifies whether the SCI (Secure Channel Identifier) is included in every packet. | 
validation  | 
int32  | 
2  | 
Specifies the validation mode for incoming frames. |