You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is no option in openconfig-macsec to enable or disable replay-protection, effectively making it enabled always.
As per IEEE 802.1AE-2018 standard, replay protection enabled/disabled should have different impact on late pkts received and should update different counters in each case ( IEEE 802.1AE-2018 Figure 10-4 ).
So, we will need a new knob in macsec-interfaces-interface-config group to enable or disable the replay protection aswell.
The text was updated successfully, but these errors were encountered:
In openconfig-macsec model macsec-interfaces-interface-config grouping, We have replay-protection attribute which only allows configuring unsigned int value, and this value to be used for replay protection window in MACsec.
https://openconfig.net/projects/models/schemadocs/yangdoc/openconfig-macsec.html#macsec-interfaces-interface-config-replay-protection
There is no option in openconfig-macsec to enable or disable replay-protection, effectively making it enabled always.
As per IEEE 802.1AE-2018 standard, replay protection enabled/disabled should have different impact on late pkts received and should update different counters in each case ( IEEE 802.1AE-2018 Figure 10-4 ).
So, we will need a new knob in macsec-interfaces-interface-config group to enable or disable the replay protection aswell.
The text was updated successfully, but these errors were encountered: