MACsec.MKA.PortSAKDistUnExpct

Description

The Key Server must not generate new SAKs faster than once every MKA Life Time (IEEE802.1X-2010 Clause 9.8). A new SAK was requested faster than this rate, so the request was ignored.

Remedy

This condition is most likely caused by a peer sending sequential MKPDUs with a lowest acceptable packet number (LPN) that exceeds the Key Server's PendingPNExhaustion threshold (0xC0000000 packets). The problem should resolve itself. If this event is logged more than a few times per minute, contact technical support with output from "show tech".

Severity

Notice

Message Text

On port %slotPort%, MKA Life Time (%lifetime% seconds) has not elapsed since previous SAK was distributed (%secs% seconds).

Message Parameters

Name Type
slotPort SlotPort
lifetime uInt32
secs uInt32

Applicable Platforms