cipher suite
To configure a cipher suite for encrypting traffic with MACsec, use the cipher suite command. To reset the
cipher suite to its default value, use the no form of this command.
cipher suite {GCM-AES-128 | GCM-AES-256 | GCM-AES-XPN-128 | GCM-AES-XPN-256}
no cipher suite {GCM-AES-128 | GCM-AES-256 | GCM-AES-XPN-128 | GCM-AES-XPN-256}
Syntax Description
Specifies the Galois/Counter Mode (GCM) encryption
method, Advanced Encryption Standard (AES)
encryption algorithm, and 128-bit encryption.
GCM-AES-128
Specifies the GCM encryption method, AES
encryption algorithm, and 256-bit encryption.
GCM-AES-256
Specifies the GCM encryption method, AES
encryption algorithm that uses Extended Packet
Numbering (XPN) of 64 bits, and 128-bit encryption.
GCM-AES-XPN-128
Specifies the GCM encryption method, AES
encryption algorithm that uses Extended Packet
Numbering (XPN) of 64 bits, and 256-bit encryption.
GCM-AES-XPN-256
1
Command Default
The default cipher suite chosen for encryption is GCM-AES-XPN-256.
Command Modes
MACsec policy configuration (config-macsec-policy)
Command History
ModificationRelease
This command was introduced.8.2(1)
Usage Guidelines
To use this command, you should enable the MACsec Key Agreement (MKA) feature first.
1
•
GCM indicates the encryption method.
•
AES and AES-XPN indicates the hash or integrity algorithm.
•
The numeral indicates the length of the cipher.
Cisco Nexus 7000 Series Security Command Reference
56
C Commands
cipher suite
To Next Page
Loading...
