Displays per-port MKA and MAC Security (MACsec) data in tabular format.
ports | Specifies ports to show information on. |
port_list | Lists which ports to view MACsec information on. |
usage | Specifies to display per-port MACsec usage information. |
N/A.
This commands displays a table containing both control-layer (MKA) status and data-layer (MACsec) statistics:
Note
ExtremeXOS never chooses ‘Unauthenticated‘ or ‘Authenticated‘ access, but these options are allowed by the IEEE802.1X-2010 standard, so these cases may arise when interoperating with MKA/MACsec devices from other vendors.Note
To accommodate the width of the page, the MACsec columns are shown below the MKA content. In the actual output from the command, these columns appear beside each other.# show macsec ports 25,50 MAC Security -----------------MKA--------------------- Local Peer MACsec Message Message Peer Connect Key Port Enabled Number Number Status Status Server ======== ======= ======== ======== ====== ======= ====== 25 Yes 0 - N/A PENDING None 50 Yes 162244 162361 L SECURE Peer ======== ======= ======== ======== ====== ======= =======
# show macsec ports 25,50 MAC Security ---------SecY-Tx-SC----SecY-Rx-SC------ Local Peer Encrypted Octets OK Octets Packets Encrypted Packets Decrypted ======== ============ ======== ==========+ - - - - 1658 79584 2318 55827 ======== ============ ========= ==========
The following example shows MACsec usage on ports 1-2 and 49-56:
# show macsec ports 1-12,49-56 usage Subject Link to BW MACsec Allocated Port Speed Maximum? Enabled Bandwidth ======== ========= ======== ======= ========= 1 1.0Gbps Yes Yes 1.0Gbps 2 1.0Gbps Yes Yes 1.0Gbps 3 1.0Gbps Yes Yes 1.0Gbps 4 1.0Gbps Yes Yes 1.0Gbps 5 1.0Gbps Yes Yes 1.0Gbps 6 1.0Gbps Yes Yes 1.0Gbps 7 1.0Gbps Yes Yes 1.0Gbps 8 1.0Gbps Yes Yes 1.0Gbps 9 1.0Gbps Yes Yes 1.0Gbps 10 1.0Gbps Yes Yes 1.0Gbps 11 1.0Gbps Yes No - 12 1.0Gbps Yes No - 49 10.0Gbps Yes No - 50 10.0Gbps Yes No - 51 10.0Gbps Yes No - 52 10.0Gbps Yes No - 53 10.0Gbps Yes Yes 10.0Gbps 55 10.0Gbps Yes No -
This command was first available in ExtremeXOS 30.1.
The usage option was first available in ExtremeXOS 31.5
This command is available on the following platforms.
Note
The MACsec feature requires the installation of the MAC Security feature pack license.Platform | Ports | LRM/MACsec Adapter Required? |
---|---|---|
ExtremeSwitching X460-G2-24p-24hp, X460-G2-24t-24ht switches | Half-duplex, 1G ports (25–48) | No |
All other SFP/SFP+ ports * | Yes | |
ExtremeSwitching X450-G2, X460-G2, X440-G2, X590, X620, and X695 series switches | SFP/SFP+ ports * | Yes |
ExtremeSwitching X465 |
X465-24W, X465-24XE: ports 1–24 X465-48T, X465-48P, X465-48W, X465i-48W: ports 1–48 X465-24MU-24W: ports 25–48 VIM5-4XE: all 4 ports VIM5-4YE in X465-24MU, X465-24MU-24W switches: all 4 ports VIM5-4YE in X465-24W, X465-48T, X465-48P, X465-48W, X464.24S, X465-24S, X465i-48W: first 2 ports only |
No |
Note: * For ExtremeSwitching X460-G2
series switches, the VIM-2X option does not support the
LRM/MACsec Adapter.
|