2-539
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
replay-protection
replay-protection
To configure replay protection for Media Access Control Security (MACsec), use the replay-protection
window-size MKA policy configuration command. When replay protection is set, you must configure a
window size in number of frames. Use the no form of the command to disable replay protection. Use the
default form of this command to return to the default window size of 0 frames.
replay-protection window-size frames
[no | default] replay-protection
Syntax Description
Defaults The default window size is 0 frames.
Command Modes MKA policy configuration
Command History
Usage Guidelines Entering the default replay-protection window-size command sets the number of frames to 0. Entering
no default replay-protection window-size turns off replay protection.
Entering a window size of 0 is not the same as entering the no replay-protection command. Configuring
a window size of 0 uses replay protection with a strict ordering of frames. Entering no replay-protection
turns off replay-protection verification in MACsec.
Examples This example shows how to configure an MKA policy with a relay protection window size of 300 frames.
Switch(config)# mka policy replay-policy
Switch(config-mka-policy)# replay-protection window-size 300
Switch(config-mka-policy)# confidentiality offset 30
Switch(config-mka-policy)# end
You can verify your setting by entering the show mka session detail privileged EXEC command.
Related Commands
window-size frames Sets a window size as the number of frames. The range is from 0 to
4294967295. The default window size is 0.
Release Modification
12.2(53)SE2 This command was introduced.
Command Description
show mka session detail Displays detailed information about active MKA sessions.
To Next Page
Loading...
Need help?
General
