macsec cipher-suite

Configures the MACsec cipher suite on a switch port for enhanced traffic security. MACsec supports two cipher suites, the GCM-AES-128 with a maximum key length of 128 bits and the GCM-AES-256 with a maximum key length of 256 bits.

Configuring a MACsec cipher suite is optional and is not supported on all hardware platforms.

Syntax

default macsec cipher-suite
macsec cipher-suite gcm-aes-128
macsec cipher-suite gcm-aes-256

Command Parameters

{gcm-aes-128 | gcm-aes-256}: Specifies the MACsec encryption cipher suite.

Default

The default is the 128-bit cipher suite.

Command Mode

GigabitEthernet Interface Configuration

Usage Guidelines

This command does not apply to all hardware platforms. For more information about feature support, see VOSS Feature Support Matrix.