2-139
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
confidentiality-offset
confidentiality-offset
To configure the confidentiality offset value for the MACsec Key Agreement (MKA) Protocol policy,
use the confidentiality-offset MKA policy configuration command. To return to the default setting, use
the no or default form of this command
confidentiality-offset offset-value
[no | default] confidentiality-offset
Syntax Description
Defaults The default offset is 0 with no confidentiality offset.
Command Modes MKA policy configuration
Command History
Usage Guidelines If no confidentiality offset is configured, no encryption offset is used.
To use this feature, both peers must support confidentiality offset.
Examples This example configures an MKA policy with a confidentiality offset of 30 bytes.
Switch(config)# mka policy replay-policy
Switch(config-mka-policy)# replay-protection window-size 300
Switch(config-mka-policy)# confidentiality offset 30
Switch(config-mka-policy)# end
You can verify your setting by entering the show mka session detail privileged EXEC command.
Related Commands
offset-value Identifies a confidentiality (encryption) offset value for the MKA policy.
Valid values are 0, 30, and 50 octets (bytes).
Release Modification
12.2(53)SE2 This command was introduced.
Command Description
show mka session detail Displays detailed information about active MKA sessions.