1IP-MACSEC(8)                         Linux                        IP-MACSEC(8)
2
3
4

NAME

6       ip-macsec - MACsec device configuration
7

SYNOPSIS

9       ip  link  add  link DEVICE name NAME type macsec [ [ address <lladdr> ]
10       port PORT | sci <u64> ]  [  cipher  {  default  |  gcm-aes-128  |  gcm-
11       aes-256"}][" icvlen ICVLEN ] [ encrypt { on | off } ] [ send_sci { on |
12       off } ] [ end_station { on | off } ] [ scb { on | off } ] [  protect  {
13       on  |  off  }  ] [ replay { on | off } ] [ window WINDOW ] [ validate {
14       strict | check | disabled } ] [ encodingsa SA ]
15
16       ip macsec add DEV tx sa { 0..3 } [ OPTS ] key ID KEY
17       ip macsec set DEV tx sa { 0..3 } [ OPTS ]
18       ip macsec del DEV tx sa { 0..3 }
19
20       ip macsec add DEV rx SCI [ on | off ]
21       ip macsec set DEV rx SCI [ on | off ]
22       ip macsec del DEV rx SCI
23
24       ip macsec add DEV rx SCI sa { 0..3 } [ OPTS ] key ID KEY
25       ip macsec set DEV rx SCI sa { 0..3 } [ OPTS ]
26       ip macsec del DEV rx SCI sa { 0..3 }
27
28       ip macsec show [ DEV ]
29
30       OPTS := [ pn { 1..2^32-1 } ] [ on | off ]
31       SCI := { sci <u64> | port PORT address <lladdr> }
32       PORT := { 1..2^16-1 }
33
34
35

DESCRIPTION

37       The ip macsec commands are used to configure transmit  secure  associa‐
38       tions  and  receive  secure channels and their secure associations on a
39       MACsec device created with the ip link add  command  using  the  macsec
40       type.
41
42

EXAMPLES

44   Create a MACsec device on link eth0
45       # ip link add link eth0 macsec0 type macsec port 11 encrypt on
46
47   Configure a secure association on that device
48       # ip macsec add macsec0 tx sa 0 pn 1024 on key 01 81818181818181818181818181818181
49
50   Configure a receive channel
51       # ip macsec add macsec0 rx port 1234 address c6:19:52:8f:e6:a0
52
53   Configure a receive association
54       # ip macsec add macsec0 rx port 1234 address c6:19:52:8f:e6:a0 sa 0 pn 1 on key 00 82828282828282828282828282828282
55
56   Display MACsec configuration
57       # ip macsec show
58

SEE ALSO

60       ip-link(8)
61

AUTHOR

63       Sabrina Dubroca <sd@queasysnail.net>
64
65
66
67iproute                           07 Mar 2016                     IP-MACSEC(8)