show macsec connectivity-associationNEW!

show macsec { connectivity-association {ca_name}

Description

Displays a global summary of MAC Security (MACsec) capabilities and status for all or a specified connectivity-association (CA).

Syntax Description

connectivity-association Secure connectivity provided between MACsec stations.
ca_name Selects the Connectivity Association (CA) name.

Default

N/A.

Example

The following example shows general information about CAs:
# show macsec connectivity-association 
MACsec          
CA Name                           Ports           CKN
--------------------------------  --------------------------------------------------
ExampleCA                         33              0x101112131415161718191a1b1c1d1e1f
CA-221-228                        None            0x12345678901234561234567890123400
ca40                              40              example40
ca48                              48              example48
myca1                             None            myckn1
The following example shows information about CA "testca":
# show macsec connectivity-association testca

MACsec Connectivity Association: ca25
  Pre-shared-key
   CKN: blue
   CAK: <configured>
  Ports: 25

History

This command was first available in ExtremeXOS 30.1.

Platform Availability

This command is available on the following platforms.

Note

Note

The MACsec feature requires the installation of the MAC Security feature pack license.
Platform Ports LRM/MACsec Adapter Required?
Summit X460-G2-24p-24hp, X460-G2-24t-24ht switches Half-duplex, 1G ports (25–48) No
All other SFP/SFP+ ports * Yes
Summit X450-G2, X460-G2, X670-G2, and ExtremeSwitching X440-G2, X620, and X690 series switches SFP/SFP+ ports * Yes
Note: * For Summit X460-G2 series switches, the VIM-2X option does not support the LRM/MACsec Adapter.