show macsec mka profile

Display information about all MKA profiles configured on the switch. You can also display information for a specific MKA profile.

Syntax

Command Parameters

WORD<0-16>
Specifies the MKA profile name. An MKA profile name can consist only of alphanumeric characters (0-9, A-Z, and a-z). The profile name is case sensitive.

Default

None

Command Mode

User EXEC

Usage Guidelines

This command does not apply to all hardware platforms. For more information about feature support, see VOSS Feature Support Matrix.

Command Output

The show macsec mka profile command displays the following information:

Output field

Description

Profile-name

Specifies the profile name.

Profile ID

Specifies the profile ID number.

Cipher Suite

Specifies the encryption algorithm used to encrypt traffic on an Ethernet link that is secured with MACsec.

Confidentiality Offset

Specifies the number of unencrypted bytes that precede MACsec encryption.

Replay Protect

Specifies whether replay protect is enabled. The default is disabled.

Window Size

Specifies the size of the replay protect window.

Port

Specifies the port to which the MKA profile is applied.

Examples

The following example displays MACsec MKA profile information:

Switch:1#show macsec mka profile

==========================================================================================
                               MACsec MKA Profile
==========================================================================================
Profile         Profile    Cipher       Confidentiality   Replay     Window      Port
Name            Id         Suite           Offset         Protect     Size
------------------------------------------------------------------------------------------
test030519      1        gcm-aes-128          30           Enabled      200    1/3
test031519      2        gcm-aes-128          50           Enabled      225    1/4
test032019      3        gcm-aes-128          30           Enabled      240    2/2

All 3 out of 3 Total Num of MACsec MKA Profiles displayed
------------------------------------------------------------------------------------------

The following example displays MACsec MKA information for a specific profile.

Switch:1#show macsec mka profile test030519

==========================================================================================
                               MACsec MKA Profile
==========================================================================================
Profile         Profile    Cipher       Confidentiality   Replay     Window   Port
Name            Id         Suite           Offset         Protect     Size
------------------------------------------------------------------------------------------
test030519      1        gcm-aes-128          30           Enabled      200   1/3
------------------------------------------------------------------------------------------