View MACsec Status

Perform this procedure to view MACsec status.

About this task

This command displays the status for the following:

MACsec status
MACsec encryption status
MACsec encryption cipher suite
The associated Connectivity Association (CA) name

Note

If you do not specify a port number, the information on all MACsec capable interfaces is displayed.

Procedure

Enter Privileged EXEC mode:

enable
View the MACsec status:

show macsec status {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}
Display all MACsec related information:

show macsec

Examples

Note

The switch does not support replay protect.

View MACsec status:

Switch:1#show macsec status

==========================================================================================================================
                                                    MACSEC Port Status
==========================================================================================================================
         MACSEC     Encryption  Replay      Replay       Encryption       Cipher     CA       MKA-Profile      MKA Connect
PortId   Status     Status     Protect     Protect W'dow   Offset         Suite      Name     Name             Status
--------------------------------------------------------------------------------------------------------------------------
1/13     disabled   disabled    disabled   --              none            AES-128   NIL	  --                --
1/14     disabled   disabled    disabled   --              none	     AES-128   NIL         --                --
1/15     enabled    disabled    enabled    50              ipv4Offset(30)  AES-256   mkanka   extreme           pending

View MACsec status on port 1/13:

Switch:1#show macsec status 1/13

==========================================================================================================================
                                                    MACSEC Port Status
==========================================================================================================================
         MACSEC     Encryption  Replay      Replay        Encryption       Cipher     CA       MKA-Profile      MKA Connect
PortId   Status     Status      Protect     Protect W'dow   Offset         Suite      Name     Name             Status
--------------------------------------------------------------------------------------------------------------------------
1/13     enabled	disabled    enabled     50          ipv4Offset(30)  AES-256   mkanka   extreme          pending

Display all MACsec information:

Switch:1>show macsec

====================================================================================================
                     MACSEC Connectivity Associations Info
====================================================================================================
 Connectivity             SHA-1 Connectivity              AN_Mode /       Port
Association Name          Association Key Hash            TxKeyParity     Members
----------------------------------------------------------------------------------------------------
conn1                550e0fb1dec7eaa40a473b09790c8745      4AN / Even

All 1 out of 1 Total Num of Macsec connectivity associates displayed


==========================================================================================================
                               MACSEC Port Status
==========================================================================================================
         MACSEC     Encryption  Replay   Replay       Encryption    Cipher     CA   MKA-Profile  MKA Connect
PortId   Status     Status     Protect   Protect W'dow   Offset     Suite      Name Name         Status
----------------------------------------------------------------------------------------------------------
1/1      disabled   disabled   disabled   --             none       AES-128    Nil  --           --
1/2      disabled   disabled   disabled   --             none       AES-128    Nil  --           --
1/3      disabled   disabled   disabled   --             none       AES-128    Nil  --           --
1/4      disabled   disabled   disabled   --             none       AES-128    Nil  --           --
1/5      disabled   disabled   disabled   --             none       AES-128    Nil  --           --