macsec

macsec — The NMSettingMacsec object is a NMSetting subclass that describes properties necessary for connection to MACsec (IEEE 802.1AE) interfaces.

Properties

Table 60. 

Key Name Value Type Default Value Value Description
encrypt
boolean
TRUE
Whether the transmitted traffic must be encrypted.
mka-cak
string
The pre-shared CAK (Connectivity Association Key) for MACsec Key Agreement.
mka-cak-flags
NMSettingSecretFlags (uint32)
Flags indicating how to handle the "mka-cak" property.
mka-ckn
string
The pre-shared CKN (Connectivity-association Key Name) for MACsec Key Agreement.
mode
int32
0
Specifies how the CAK (Connectivity Association Key) for MKA (MACsec Key Agreement) is obtained.
parent
string
If given, specifies the parent interface name or parent connection UUID from which this MACSEC interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property.
port
int32
1
The port component of the SCI (Secure Channel Identifier), between 1 and 65534.
send-sci
boolean
TRUE
Specifies whether the SCI (Secure Channel Identifier) is included in every packet.
validation
int32
2
Specifies the validation mode for incoming frames.