Displays per-port MKA and MAC Security (MACsec) data in tabular format.
ports | Specifies ports to show information on. |
port_list | Lists which ports to view MACsec information on. |
usage | Specifies to display per-port MACsec usage information. |
N/A.
This commands displays a table containing both control-layer (MKA) status and data-layer (MACsec) statistics:
Note
ExtremeXOS never chooses ‘Unauthenticated‘ or ‘Authenticated‘ access, but these options are allowed by the IEEE802.1X-2010 standard, so these cases may arise when interoperating with MKA/MACsec devices from other vendors.Note
To accommodate the width of the page, the MACsec columns are shown below the MKA content. In the actual output from the command, these columns appear beside each other.# show macsec ports 25,50 MAC Security -----------------MKA--------------------- Local Peer MACsec Message Message Peer Connect Key Port Enabled Number Number Status Status Server ======== ======= ======== ======== ====== ======= ====== 25 Yes 0 - N/A PENDING None 50 Yes 162244 162361 L SECURE Peer ======== ======= ======== ======== ====== ======= =======
# show macsec ports 25,50 MAC Security ---------SecY-Tx-SC----SecY-Rx-SC------ Local Peer Encrypted Octets OK Octets Packets Encrypted Packets Decrypted ======== ============ ======== ==========+ - - - - 1658 79584 2318 55827 ======== ============ ========= ==========
The following example shows MACsec usage on ports 1-2 and 49-56:
# show macsec ports 1-12,49-56 usage Subject Link to BW MACsec Allocated Port Speed Maximum? Enabled Bandwidth ======== ========= ======== ======= ========= 1 1.0Gbps Yes Yes 1.0Gbps 2 1.0Gbps Yes Yes 1.0Gbps 3 1.0Gbps Yes Yes 1.0Gbps 4 1.0Gbps Yes Yes 1.0Gbps 5 1.0Gbps Yes Yes 1.0Gbps 6 1.0Gbps Yes Yes 1.0Gbps 7 1.0Gbps Yes Yes 1.0Gbps 8 1.0Gbps Yes Yes 1.0Gbps 9 1.0Gbps Yes Yes 1.0Gbps 10 1.0Gbps Yes Yes 1.0Gbps 11 1.0Gbps Yes No - 12 1.0Gbps Yes No - 49 10.0Gbps Yes No - 50 10.0Gbps Yes No - 51 10.0Gbps Yes No - 52 10.0Gbps Yes No - 53 10.0Gbps Yes Yes 10.0Gbps 55 10.0Gbps Yes No -
This command was first available in ExtremeXOS 30.1.
The usage option was first available in ExtremeXOS 31.5
This command is available on the following platforms.
Note
The MACsec feature requires the installation of the MAC Security feature pack license.Platform | Ports |
---|---|
ExtremeSwitching 5320 | All ports of all models except stacking ports. |
ExtremeSwitching 5420 | All ports of all models except stacking ports. |
ExtremeSwitching 5520 | All ports, except 5520-VIM-4X and 5520-24X 10G ports |
ExtremeSwitching 5720 | All ports of all models except stacking ports. |