show macsec mka profile

Display information about all MKA profiles configured on the switch. You can also display information for a specific MKA profile.

Syntax

Command Parameters

WORD<0-16>
Specifies the MKA profile name. An MKA profile name can consist only of alphanumeric characters (0-9, A-Z, and a-z). The profile name is case sensitive.

Default

None

Command Mode

User EXEC

Usage Guidelines

This command does not apply to all hardware platforms. For more information about feature support, see Fabric Engine Feature Support Matrix.

Command Output

The show macsec mka profile command displays the following information:

Output field

Description

Profile-name

Specifies the profile name.

Profile ID

Specifies the profile ID number.

Cipher Suite

Specifies the encryption algorithm used to encrypt traffic on an Ethernet link that is secured with MACsec.

Confidentiality Offset

Specifies the number of unencrypted bytes that precede MACsec encryption.

Replay Protect

Specifies whether replay protect is enabled. The default is disabled.

Window Size

Specifies the size of the replay protect window.

Port

Specifies the port to which the MKA profile is applied.

Include-SCI

Specifies whether SCI tagging for a MACsec enabled switch. The default is disabled.

Examples

The following example displays MACsec MKA profile information:

Switch:1#show macsec mka profile

=================================================================================
                               MACsec MKA Profile
=================================================================================
Profile    Profile  Cipher    Confidentiality  Replay   Window  Port  Include-SCI
Name        Id      Suite      Offset          Protect  Size
---------------------------------------------------------------------------------
test030519   1     gcm-aes-128   30            Enabled    200    1/3    false
test031519   2     gcm-aes-128   50            Enabled    225    1/4    false
test032019   3     gcm-aes-128   30            Enabled    240    2/2    false

All 3 out of 3 Total Num of MACsec MKA Profiles displayed
---------------------------------------------------------------------------------

The following example displays MACsec MKA information for a specific profile.

Switch:1#show macsec mka profile test030519

===============================================================================
                            MACsec MKA Profile
===============================================================================
Profile   Profile Cipher   Confidentiality  Replay   Window  Port  Include-SCI
Name       Id     Suite      Offset         Protect   Size
-------------------------------------------------------------------------------
test030519  1     gcm-aes-128  30           Enabled    200   1/3    false
-------------------------------------------------------------------------------