Perform this procedure to view MACsec status.
MACsec status
MACsec encryption status
MACsec encryption cipher suite
The associated Connectivity Association (CA) name
Note
If you do not specify a port number, the information on all MACsec capable interfaces is displayed.
show macsec status {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}
show macsec
Note
The switch does not support replay protect.
View MACsec status:
Switch:1#show macsec status ========================================================================================================================== MACSEC Port Status ========================================================================================================================== MACSEC Encryption Replay Replay Encryption Cipher CA MKA-Profile MKA Connect PortId Status Status Protect Protect W'dow Offset Suite Name Name Status -------------------------------------------------------------------------------------------------------------------------- 1/13 disabled disabled disabled -- none AES-128 NIL -- -- 1/14 disabled disabled disabled -- none AES-128 NIL -- -- 1/15 enabled disabled enabled 50 ipv4Offset(30) AES-256 mkanka extreme pending
View MACsec status on port 1/13:
Switch:1#show macsec status 1/13 ========================================================================================================================== MACSEC Port Status ========================================================================================================================== MACSEC Encryption Replay Replay Encryption Cipher CA MKA-Profile MKA Connect PortId Status Status Protect Protect W'dow Offset Suite Name Name Status -------------------------------------------------------------------------------------------------------------------------- 1/13 enabled disabled enabled 50 ipv4Offset(30) AES-256 mkanka extreme pending
Display all MACsec information:
Switch:1>show macsec ==================================================================================================== MACSEC Connectivity Associations Info ==================================================================================================== Connectivity SHA-1 Connectivity AN_Mode / Port Association Name Association Key Hash TxKeyParity Members ---------------------------------------------------------------------------------------------------- conn1 550e0fb1dec7eaa40a473b09790c8745 4AN / Even All 1 out of 1 Total Num of Macsec connectivity associates displayed ========================================================================================================== MACSEC Port Status ========================================================================================================== MACSEC Encryption Replay Replay Encryption Cipher CA MKA-Profile MKA Connect PortId Status Status Protect Protect W'dow Offset Suite Name Name Status ---------------------------------------------------------------------------------------------------------- 1/1 disabled disabled disabled -- none AES-128 Nil -- -- 1/2 disabled disabled disabled -- none AES-128 Nil -- -- 1/3 disabled disabled disabled -- none AES-128 Nil -- -- 1/4 disabled disabled disabled -- none AES-128 Nil -- -- 1/5 disabled disabled disabled -- none AES-128 Nil -- --