Confidentiality-Offset - Cisco Catalyst 3560X-24P Command Reference Manual

confidentiality-offset

confidentiality-offset
To configure the confidentiality offset value for the MACsec Key Agreement (MKA) Protocol policy,
use the confidentiality-offset MKA policy configuration command. To return to the default setting, use
the no or default form of this command
Syntax Description
offset-value
Defaults
The default offset is 0 with no confidentiality offset.
Command Modes MKA policy configuration
Command History Release
12.2(53)SE2
Usage Guidelines If no confidentiality offset is configured, no encryption offset is used.
To use this feature, both peers must support confidentiality offset.
Examples This example configures an MKA policy with a confidentiality offset of 30 bytes.
Switch(config)# mka policy replay-policy
Switch(config-mka-policy)# replay-protection window-size 300
Switch(config-mka-policy)# confidentiality offset 30
Switch(config-mka-policy)# end
You can verify your setting by entering the show mka session detail privileged EXEC command.
Related Commands Command
show mka session detail
Catalyst 3750-X and 3560-X Switch Command Reference
2-132
confidentiality-offset offset-value
[no | default] confidentiality-offset
Identifies a confidentiality (encryption) offset value for the MKA policy.
Valid values are 0, 30, and 50 octets (bytes).
Modification
This command was introduced.
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Description
Displays detailed information about active MKA sessions.
OL-21522-02