Replay-Protection - Cisco Catalyst 3560X-24P Command Reference Manual

replay-protection

replay-protection
To configure replay protection for Media Access Control Security (MACsec), use the replay-protection
window-size MKA policy configuration command. When replay protection is set, you must configure a
window size in number of frames. Use the no form of the command to disable replay protection. Use the
default form of this command to return to the default window size of 0 frames.
Syntax Description window-size frames
Defaults
The default window size is 0 frames.
Command Modes MKA policy configuration
Command History Release
12.2(53)SE2
Usage Guidelines
Entering the default replay-protection window-size command sets the number of frames to 0. Entering
no default replay-protection window-size turns off replay protection.
Entering a window size of 0 is not the same as entering the no replay-protection command. Configuring
a window size of 0 uses replay protection with a strict ordering of frames. Entering no replay-protection
turns off replay-protection verification in MACsec.
Examples This example shows how to configure an MKA policy with a relay protection window size of 300 frames.
Switch(config)# mka policy replay-policy
Switch(config-mka-policy)# replay-protection window-size 300
Switch(config-mka-policy)# confidentiality offset 30
Switch(config-mka-policy)# end
You can verify your setting by entering the show mka session detail privileged EXEC command.
Related Commands Command
show mka session detail
Catalyst 3750-X and 3560-X Switch Command Reference
2-486
replay-protection window-size frames
[no | default] replay-protection
Sets a window size as the number of frames. The range is from 0 to
4294967295. The default window size is 0.
Modification
This command was introduced.
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Description
Displays detailed information about active MKA sessions.
OL-21522-02