Confidentiality-Offset - Cisco Catalyst 3750-X Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

confidentiality-offset

To configure the confidentiality offset value for the MACsec Key Agreement (MKA) Protocol policy,
use the confidentiality-offset MKA policy configuration command. To return to the default setting, use
the no or default form of this command
Syntax Description
offset-value
Defaults
The default offset is 0 with no confidentiality offset.
Command Modes MKA policy configuration
Command History Release
12.2(53)SE2
Usage Guidelines
If no confidentiality offset is configured, no encryption offset is used.
To use this feature, both peers must support confidentiality offset.
Examples This example configures an MKA policy with a confidentiality offset of 30 bytes.
Switch(config)# mka policy replay-policy
Switch(config-mka-policy)# replay-protection window-size 300
Switch(config-mka-policy)# confidentiality offset 30
Switch(config-mka-policy)# end
You can verify your setting by entering the show mka session detail privileged EXEC command.
Related Commands Command
show mka session detail
OL-29704-01
confidentiality-offset offset-value
[no | default] confidentiality-offset
Identifies a confidentiality (encryption) offset value for the MKA policy.
Valid values are 0, 30, and 50 octets (bytes).
Modification
This command was introduced.
Description
Displays detailed information about active MKA sessions.
Catalyst 3750-X and 3560-X Switch Command Reference
confidentiality-offset
2-139