View MACsec Status

Perform this procedure to view MACsec status.

About this task

This command displays the status for the following:

MACsec status
MACsec encryption status
MACsec encryption cipher suite, if supported on your hardware platform
The associated Connectivity Association (CA) name

Note

If you do not specify a port number, the information on all MACsec capable interfaces is displayed.

Procedure

Enter Privileged EXEC mode:

enable
View the MACsec status:

show macsec status {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}
Display all MACsec related information:

show macsec

Examples

Note

The switch does not support replay protect.

View MACsec status:

Switch:1#show macsec status

==========================================================================================================================
                                                    MACSEC Port Status
==========================================================================================================================
         MACSEC     Encryption  Replay      Replay       Encryption       Cipher     CA       MKA-Profile      MKA Connect
PortId   Status     Status     Protect     Protect W'dow   Offset         Suite      Name     Name             Status
--------------------------------------------------------------------------------------------------------------------------
1/13     disabled   disabled    disabled   --              none            AES-128   NIL	  --                --
1/14     disabled   disabled    disabled   --              none	     AES-128   NIL         --                --
1/15     enabled    disabled    enabled    50              ipv4Offset(30)  AES-256   mkanka   extreme           pending

View MACsec status on port 1/13:

Switch:1#show macsec status 1/13

==========================================================================================================================
                                                    MACSEC Port Status
==========================================================================================================================
         MACSEC     Encryption  Replay      Replay        Encryption       Cipher     CA       MKA-Profile      MKA Connect
PortId   Status     Status      Protect     Protect W'dow   Offset         Suite      Name     Name             Status
--------------------------------------------------------------------------------------------------------------------------
1/13     enabled	disabled    enabled     50          ipv4Offset(30)  AES-256   mkanka   extreme          pending

Display all MACsec information:

Switch:1#show macsec

=========================================================================================
                     MACSEC Connectivity Associations Info
=========================================================================================
  Connectivity                Connectivity                 AN_Mode /      Port
Association Name          Association Key Hash            TxKeyParity     Members
-----------------------------------------------------------------------------------------
mkanakexit`                d4433e901bae92d0cc472706f66cfc18      4AN / odd

All 1 out of 1 Total Num of Macsec connectivity associates displayed

==========================================================================================================================
                                                    MACSEC Port Status
==========================================================================================================================
         MACSEC     Encryption  Replay      Replay       Encryption       Cipher     CA       MKA-Profile      MKA Connect
PortId   Status     Status     Protect     Protect W'dow   Offset         Suite      Name     Name             Status
--------------------------------------------------------------------------------------------------------------------------
1/13     disabled   disabled    disabled   --              none            AES-128   NIL	  --                --
1/14     disabled   disabled    disabled   --              none	     AES-128   NIL         --                --
1/15     enabled    disabled    enabled    50              ipv4Offset(30)  AES-256   mkanka   extreme           pending 

--More-- (q = quit)