conf-offset
To configure the confidentiality offset for MACsec Key Agreement (MKA) encryption, use the conf-offset
command. To disable the confidentiality offset, use the no form of this command.
conf-offset {CONF-OFFSET-0 | CONF-OFFSET-30 | CONF-OFFSET-50}
no conf-offset {CONF-OFFSET-0 | CONF-OFFSET-30 | CONF-OFFSET-50}
Syntax Description
Does not offset the encryption.CONF-OFFSET-0
Offsets the encryption by 30 characters.CONF-OFFSET-30
Offsets the encryption by 50 characters.CONF-OFFSET-50
Command Default
No confidentiality offset is configured for MKA encryption.
Command Modes
MACsec policy configuration (config-macsec-policy)
Command History
ModificationRelease
This command was introduced.8.2(1)
Usage Guidelines
To use this command, you should enable the MKA feature first.
Examples
This example shows how to set the confidentiality offset:
switch# configure terminal
switch(config)# macsec policy p1
switch(config-macsec-policy)# conf-offset CONF-OFFSET-0
Related Commands
DescriptionCommand
Enables the MKA feature.feature mka
Creates a key or enters the configuration mode of an
existing key.
key
Creates a keychain or enters the configuration mode
of an existing keychain.
key chain keychain-name
Cisco Nexus 7000 Series Security Command Reference
100
C Commands
conf-offset