replay-protection enable

Use replay-protection enable to enable MACsec replay protection in an MKA policy.

Use undo replay-protection enable to disable MACsec replay protection in an MKA policy.

Syntax

undo replay-protection enable

Default

MACsec replay protection is enabled in an MKA policy.

Views

MKA policy view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This feature allows a MACsec port to accept a number of out-of-order or repeated inbound frames.

When an MKA policy is applied to a port, the replay protection configuration in the policy overwrites the replay protection feature already used by the port.

Examples

# Enable MACsec replay protection in MKA policy abcd.

<Sysname> system-view
[Sysname] mka policy abcd
[Sysname-mka-policy-abcd] replay-protection enable

Related commands

macsec replay-protection enable

mka apply policy

replay-protection window-size

prev	up	next
mka psk	home	replay-protection window-size