Viewing MACsec Statistics

Perform this procedure to view the MACsec statistics.

Procedure

Enter Privileged EXEC mode:

enable
View the general MACsec statistics:

show macsec statistics [{slot/port[/sub-port][-slot/port[/sub-port]][,...]}]
View the secure-channel inbound MACsec statistics:

show macsec statistics [{slot/port[/sub-port][-slot/port[/sub-port]][,...]}] secure-channel inbound
View the secure-channel outbound MACsec statistics:

show macsec statistics [{slot/port[/sub-port][-slot/port[/sub-port]][,...]}] secure-channel outbound

Example

Display general MACsec statistics, inbound MACsec statistics, and outbound MACsec statistics:

Note

Slot and port information can differ depending on hardware platform. For more information, see the hardware documentation for your platform.

The switch supports MACsec on specific ports. For more information, see your hardware documentation.

Note

Display inconsistencies might occur for MACsec statistics when different ports interoperate with one another.
The VSP4900-24P, VSP 8404, and VSP 8600 Series 8624XS IOC module display only the Security Association (SA) statistics and not the global Secure Channel statistics. If you shutdown a port on these switches and if it has MACsec enabled on it then the system deletes the SAs and displays the count as 0 in the show commands.

Switch:1>enable
Switch:1#show macsec statistics 1/40

=====================================================================
                             MACSEC Port Statistics
=====================================================================
        TxUntagged       TxTooLong       RxUntagged      RxNoTag
PortId   Packets          Packets         Packets        Packets
---------------------------------------------------------------------
1/40       0               0               0               0         

          RxBadTag      RxUnknown       RxNoSCI       RxOverrun
PortId    Packets       SCIPackets      Packets        Packets
---------------------------------------------------------------------
1/40       0               0               0               0

Switch:1#show macsec statistics 1/40 secure-channel inbound

===========================================================================
                 MACSEC Port Inbound Secure Channel Statistics
===========================================================================
           UnusedSA     NoUsingSA       Late         NotValid      Invalid
PortId     Packets      Packets        Packets       Packets       Packets
---------------------------------------------------------------------------
1/40       0               0               0           100037        0            

           Delayed     Unchecked        Ok         Octets          Octets
PortId     Packets      Packets        Pkts      Validated       Decrypted
---------------------------------------------------------------------------
1/40       0               0               0         53528828      0

Switch:1#show macsec statistics 1/40 secure-channel outbound

===========================================================================
                 MACSEC Port Outbound Secure Channel Statistics
===========================================================================
          Protected      Encrypted      Octets          Octets
PortId     Packets        Packets      Protected       Encrypted
---------------------------------------------------------------------------
1/40       0               99946           0               53434154