show macsec mka profile

Display information about all MKA profiles configured on the switch. You can also display information for a specific MKA profile.

Syntax

show macsec mka profile
show macsec mka profile WORD<0-16>

Command Parameters

WORD<0-16>: Specifies the MKA profile name. An MKA profile name can consist only of alphanumeric characters (0-9, A-Z, and a-z). The profile name is case sensitive.

Default

None

Command Mode

User EXEC

Usage Guidelines

This command does not apply to all hardware platforms. For more information about feature support, see VOSS Feature Support Matrix.

Command Output

The show macsec mka profile command displays the following information:


Output field	Description
Profile-name	Specifies the profile name.
Profile ID	Specifies the profile ID number.
Cipher Suite	Specifies the encryption algorithm used to encrypt traffic on an Ethernet link that is secured with MACsec.
Confidentiality Offset	Specifies the number of unencrypted bytes that precede MACsec encryption.
Replay Protect	Specifies whether replay protect is enabled. The default is disabled.
Window Size	Specifies the size of the replay protect window.
Port	Specifies the port to which the MKA profile is applied.
Include-SCI Note: Exception: not supported on VSP 8600 Series.	Specifies whether SCI tagging for a MACsec enabled switch. The default is disabled.

Examples

The following example displays MACsec MKA profile information:

Switch:1#show macsec mka profile

===================================================================================================
                               MACsec MKA Profile
===================================================================================================
Profile         Profile    Cipher       Confidentiality   Replay     Window      Port   Include-SCI
Name            Id         Suite           Offset         Protect     Size
---------------------------------------------------------------------------------------------------
test030519      1        gcm-aes-128          30           Enabled      200    1/3      false
test031519      2        gcm-aes-128          50           Enabled      225    1/4      false
test032019      3        gcm-aes-128          30           Enabled      240    2/2      false

All 3 out of 3 Total Num of MACsec MKA Profiles displayed
---------------------------------------------------------------------------------------------------

The following example displays MACsec MKA information for a specific profile.

Switch:1#show macsec mka profile test030519

===================================================================================================
                               MACsec MKA Profile
===================================================================================================
Profile         Profile    Cipher       Confidentiality   Replay     Window   Port    Include-SCI
Name            Id         Suite           Offset         Protect     Size
---------------------------------------------------------------------------------------------------
test030519      1        gcm-aes-128          30           Enabled      200   1/3     false
---------------------------------------------------------------------------------------------------