show macsec

モード: 特権EXECモード
カテゴリー: L2スイッチング / MACsec

# show macsec [interface IFRANGE]

MACsecが有効なポートの全般的情報を表示する。

パラメーター

interface IFRANGE インターフェース名。ハイフン、カンマを使った複数指定も可能。省略時はMACsecが有効なすべてのインターフェースが対象となる

使用例

awplus# show macsec ↓

MKA and MACsec information for interface port1.0.1:

  MKA Active: False

MKA and MACsec information for interface port1.0.2:

  MKA:

    Active:                        True
    MACsec Protection Mode:        Integrity and confidentiality
    Actor SCI:                     eccd.6dd1.65bf/1395
    Actor Priority:                128
    Key Server SCI:                eccd.6dd1.6597/177d
    Key Server Priority:           128
    Keys Distributed:              0
    Keys Received:                 1

  General MACsec info:

    State:                         OK
    Current Cipher Suite:          GCM-AES-128
    Cipher Suite Protection:       Integrity and confidentiality

    Input Data Pkts (Allowed):     120
    Input Data Pkts (Blocked):     0
    Input EAPOL Pkts:              118

    Output Data Pkts (OK):         3
    Output Data Pkts (Error):      0
    Output EAPOL Pkts:             120

  Frame Generation:

    Protect Frames:                True
    Always Include SCI:            True

    Pkts Untagged:                 0
    Pkts Too Long:                 0

    Bytes Protected Only:          0
    Bytes Encrypted:               144

  Frame Verification:

    Validate Frames:               Strict
    Replay Protect:                True
    Replay Window:                 0

    Pkts Untagged (Allowed):       0
    Pkts Untagged (Blocked):       0
    Pkts Bad Tag:                  0
    Pkts Unknown SCI (Allowed):    0
    Pkts Unknown SCI (Blocked):    0
    Pkts Overrun:                  0

    Bytes Validated Only:          0
    Bytes Decrypted:               5760

  Transmit Channel eccd.6dd1.65bf/1395:

    Created Time:                  2019-11-15 07:35:58

    Pkts Protected Only:           0
    Pkts Encrypted:                3

    Secure Association 0:

      Key Identifier:              71E2FB9D6588CB0E1315510500000001
      Created Time:                2019-11-15 07:36:02
      In Use:                      True
      Next Packet Number:          0x00000004

      Pkts Protected Only:         0
      Pkts Encrypted:              3

  Receive Channel eccd.6dd1.6597/177d:

    Created Time:                  2019-11-15 07:36:00

    Pkts OK:                       120
    Pkts Unchecked:                0
    Pkts Invalid (Allowed):        0
    Pkts Invalid (Blocked):        0
    Pkts Late (Allowed):           0
    Pkts Late (Blocked):           0

    Secure Association 0:

      Key Identifier:              71E2FB9D6588CB0E1315510500000001
      Created Time:                2019-11-15 07:36:02
      In Use:                      True
      Next Packet Number:          0x00000079

      Pkts OK:                     120
      Pkts Invalid (Allowed):      0
      Pkts Invalid (Blocked):      0

show macsec

パラメーター

使用例

関連コマンド