## macsec macsec — MACSec Settings |

## Properties

Table 54.

Key Name | Value Type | Default Value | Value Description
--- | --- | --- | ---
    encrypt
    boolean
    TRUE
| Whether the transmitted traffic must be encrypted.
    mka-cak
    string
| The pre-shared CAK (Connectivity Association Key) for MACsec Key Agreement. Must be a string of 32 hexadecimal characters.
    mka-cak-flags
    NMSettingSecretFlags (uint32)
| Flags indicating how to handle the "mka-cak" property.
    mka-ckn
    string
| The pre-shared CKN (Connectivity-association Key Name) for MACsec Key Agreement. Must be a string of hexadecimal characters with a even length between 2 and 64.
    mode
    int32
    0
| Specifies how the CAK (Connectivity Association Key) for MKA (MACsec Key Agreement) is obtained.
    parent
    string
| If given, specifies the parent interface name or parent connection UUID from which this MACSEC interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property.
    port
    int32
    1
| The port component of the SCI (Secure Channel Identifier), between 1 and 65534.
    send-sci
    boolean
    TRUE
| Specifies whether the SCI (Secure Channel Identifier) is included in every packet.
    validation
    int32
    2
| Specifies the validation mode for incoming frames.