macsec: NetworkManager Reference Manual

## macsec macsec — MACSec Settings |

## Properties

Table 55.

Key Name | Value Type | Default Value | Value Description
--- | --- | --- | ---
    encrypt
    boolean
    TRUE
| Whether the transmitted traffic must be encrypted.
    mka-cak
    string
| The pre-shared CAK (Connectivity Association Key) for MACsec Key Agreement. Must be a string of 32 hexadecimal characters.
    mka-cak-flags
    NMSettingSecretFlags (uint32)
| Flags indicating how to handle the "mka-cak" property.
    mka-ckn
    string
| The pre-shared CKN (Connectivity-association Key Name) for MACsec Key Agreement. Must be a string of hexadecimal characters with a even length between 2 and 64.
    mode
    int32
    0
| Specifies how the CAK (Connectivity Association Key) for MKA (MACsec Key Agreement) is obtained.
    offload
    int32
    -1
| Specifies the MACsec offload mode. 0 (off) disables MACsec offload. 1 (phy) and 2 (mac) request offload respectively to the PHY or to the MAC; if the selected mode is not available, the connection will fail. -1 (default) uses the global default value specified in NetworkManager configuration; if no global default is defined, the built-in default is 0 (off).
    parent
    string
| If given, specifies the parent interface name or parent connection UUID from which this MACSEC interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property.
    port
    int32
    1
| The port component of the SCI (Secure Channel Identifier), between 1 and 65534.
    send-sci
    boolean
    TRUE
| Specifies whether the SCI (Secure Channel Identifier) is included in every packet.
    validation
    int32
    2
| Specifies the validation mode for incoming frames.