About MACsec protection parameters
You can set the following MACsec protection parameters:
MACsec confidentiality offset—Specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame. The offset value can be 0, 30, or 50.
MACsec replay protection—Allows a MACsec port to accept a number of out-of-order or repeated inbound frames.
MACsec validation—Allows a port to perform integrity check based on the validation modes.