Macsec Confidentiality-Offset - HP FlexNetwork 7500 Series Command Reference Manual

Table 105 Command output
Field
MKPDUs with invalid CKN
MKPDUs with invalid ICV
MKPDUs with Rx error
CKN for participant
Tx MKPDUs
Rx MKPDUs
MKPDUs with invalid MN
MKPDUs with Tx error
SAKs distributed
SAKs received
Related commands
reset mka statistics

macsec confidentiality-offset

Use macsec confidentiality-offset to set the MACsec confidentiality offset on a port.
Use undo macsec confidentiality-offset to restore the default.
Syntax
macsec confidentiality-offset offset-value
undo macsec confidentiality-offset
Default
The MACsec confidentiality offset on the port is 0. The entire frame is encrypted.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
offset-value: Specifies the confidentiality offset in bytes. The value can be 0, 30 or 50.
Usage guidelines
The MACsec confidentiality offset specifies the number of bytes starting from the frame header.
MACsec encrypts only the bytes after the offset in a frame.
If you execute this command on a port to which an MKA policy has been applied, the configuration
overwrites the confidentiality offset in the MKA policy. The MKA policy application is removed from
the port. However, other settings (settings for parameters except the confidentiality offset) of the
MKA policy are effective on the port.
MACsec uses the MACsec confidentiality offset propagated by the key server.
Description
Number of received MKA packets with invalid CKNs.
Number of MKA packets that failed ICV check.
Number of received error MKA packets.
CAK name of the MKA instance.
Number of the MKA packets sent by the MKA instance.
Number of the MKA packets received by the MKA instance.
Number of MKA packets with illegal MNs received by the MKA instance.
Number of error MKA packets sent by the MKA instance.
Number of SAKs distributed by the MKA instance.
Number of SAKs received by the MKA instance.
676