show macsec mka profile

Display information about all MKA profiles configured on the switch. You can also display information for a specific MKA profile.

Syntax

show macsec mka profile
show macsec mka profile WORD<0-16>

Command Parameters

WORD<0-16>: Specifies the MKA profile name. An MKA profile name can consist only of alphanumeric characters (0-9, A-Z, and a-z). The profile name is case sensitive.

Default

None

Command Mode

User EXEC

Usage Guidelines

This command does not apply to all hardware platforms. For more information about feature support, see Fabric Engine Feature Support Matrix.

Command Output

The show macsec mka profile command displays the following information:


Output field	Description
Profile-name	Specifies the profile name.
Profile ID	Specifies the profile ID number.
Cipher Suite	Specifies the encryption algorithm used to encrypt traffic on an Ethernet link that is secured with MACsec.
Confidentiality Offset	Specifies the number of unencrypted bytes that precede MACsec encryption.
Replay Protect	Specifies whether replay protect is enabled. The default is disabled.
Window Size	Specifies the size of the replay protect window.
Port	Specifies the port to which the MKA profile is applied.
Include-SCI	Specifies whether SCI tagging for a MACsec enabled switch. The default is disabled.

Examples

The following example displays MACsec MKA profile information:

Switch:1#show macsec mka profile

=================================================================================
                               MACsec MKA Profile
=================================================================================
Profile    Profile  Cipher    Confidentiality  Replay   Window  Port  Include-SCI
Name        Id      Suite      Offset          Protect  Size
---------------------------------------------------------------------------------
test030519   1     gcm-aes-128   30            Enabled    200    1/3    false
test031519   2     gcm-aes-128   50            Enabled    225    1/4    false
test032019   3     gcm-aes-128   30            Enabled    240    2/2    false

All 3 out of 3 Total Num of MACsec MKA Profiles displayed
---------------------------------------------------------------------------------

The following example displays MACsec MKA information for a specific profile.

Switch:1#show macsec mka profile test030519

===============================================================================
                            MACsec MKA Profile
===============================================================================
Profile   Profile Cipher   Confidentiality  Replay   Window  Port  Include-SCI
Name       Id     Suite      Offset         Protect   Size
-------------------------------------------------------------------------------
test030519  1     gcm-aes-128  30           Enabled    200   1/3    false
-------------------------------------------------------------------------------