show macsec ports

show macsec ports port-list usage

Description

Displays per-port MKA and MAC Security (MACsec) data in tabular format.

Syntax Description

ports Specifies ports to show information on.
port_list Lists which ports to view MACsec information on.
usage Specifies to display per-port MACsec usage information.

Default

N/A.

Usage Guidelines

This commands displays a table containing both control-layer (MKA) status and data-layer (MACsec) statistics:

Example

The following example shows MKA and MACsec information for ports 25 and 50:
Note

Note

To accommodate the width of the page, the MACsec columns are shown below the MKA content. In the actual output from the command, these columns appear beside each other.
# show macsec ports 25,50
MAC Security
                 -----------------MKA---------------------
                    Local     Peer
         MACsec   Message  Message Peer   Connect Key    
Port     Enabled   Number   Number Status Status  Server
======== ======= ======== ======== ====== ======= ======
25       Yes            0        - N/A    PENDING None 
50       Yes       162244   162361 L      SECURE  Peer
======== ======= ======== ======== ====== ======= =======
# show macsec ports 25,50
MAC Security
---------SecY-Tx-SC----SecY-Rx-SC------
                    Local     Peer
Encrypted     Octets       OK     Octets
Packets    Encrypted  Packets  Decrypted
======== ============ ======== ==========+
       -            -        -          -
    1658        79584      2318      55827
======== ============ ========= ==========

Example

The following example shows MACsec usage on ports 1-2 and 49-56:

# show macsec ports 1-12,49-56 usage 
                     Subject                     
               Link  to BW     MACsec   Allocated
Port          Speed  Maximum?  Enabled  Bandwidth
========  =========  ========  =======  =========
1           1.0Gbps  Yes       Yes        1.0Gbps
2           1.0Gbps  Yes       Yes        1.0Gbps
3           1.0Gbps  Yes       Yes        1.0Gbps
4           1.0Gbps  Yes       Yes        1.0Gbps
5           1.0Gbps  Yes       Yes        1.0Gbps
6           1.0Gbps  Yes       Yes        1.0Gbps
7           1.0Gbps  Yes       Yes        1.0Gbps
8           1.0Gbps  Yes       Yes        1.0Gbps
9           1.0Gbps  Yes       Yes        1.0Gbps
10          1.0Gbps  Yes       Yes        1.0Gbps
11          1.0Gbps  Yes       No               -
12          1.0Gbps  Yes       No               -
49         10.0Gbps  Yes       No               -
50         10.0Gbps  Yes       No               -
51         10.0Gbps  Yes       No               -
52         10.0Gbps  Yes       No               -
53         10.0Gbps  Yes       Yes       10.0Gbps
55         10.0Gbps  Yes       No               -

History

This command was first available in ExtremeXOS 30.1.

The usage option was first available in ExtremeXOS 31.5

Platform Availability

This command is available on the following platforms.

Note

Note

The MACsec feature requires the installation of the MAC Security feature pack license.
Platform Ports LRM/MACsec Adapter Required?
ExtremeSwitching X460-G2-24p-24hp, X460-G2-24t-24ht switches Half-duplex, 1G ports (25–48) No
All other SFP/SFP+ ports * Yes
ExtremeSwitching X450-G2, X460-G2, X440-G2, X590, X620, and X695 series switches SFP/SFP+ ports * Yes
ExtremeSwitching X465

X465-24W, X465-24XE: ports 1–24

X465-48T, X465-48P, X465-48W, X465i-48W: ports 1–48

X465-24MU-24W: ports 25–48

VIM5-4XE: all 4 ports

VIM5-4YE in X465-24MU, X465-24MU-24W switches: all 4 ports

VIM5-4YE in X465-24W, X465-48T, X465-48P, X465-48W, X464.24S, X465-24S, X465i-48W: first 2 ports only

No
Note: * For ExtremeSwitching X460-G2 series switches, the VIM-2X option does not support the LRM/MACsec Adapter.