clear macsec secy

Use this command to reset IEEE8021‐SECY‐MIB objects for replay protection to default values.

Syntax

clear macsec secy {replay-protect | window}port-string

Parameters

replay-protect Security feature that drops out of order packets when enabled.
window A replay protection feature that allows for the setting of the number of allowed out-of-order packets before packets are dropped.
port-string (Optional) Specifies the port affected by the replay protection configuration change.

Defaults

The replay‐protect parameter is enabled by default.

The window-size defaults to 0. This specifies that all out-of-order packets are dropped.

If a port or ports are not specified, the command applies to all MACsec-capable ports.

Mode

All command modes.

Example

This example shows how to reset the replay protection window to the default of 0 packets for ports "ge.1.1" through "ge.1.10":

System(rw)->set macsec secy window ge.1.1-10

This example shows how to reset replay protection to the default value of enabled on ports "ge.1.11" through "ge.1.24":

System(rw)->clear macsec secy replay-protect ge.1.11-24