show macsec

コマンド説明

パラメーター

interface IFRANGE

インターフェース名。ハイフン、カンマを使った複数指定も可能。省略時はMACsecが有効なすべてのインターフェースが対象となる

使用例

awplus# show macsec interface port1.0.5

MKA and MACsec information for interface port1.0.5:

  MKA:

    Pre-shared CAK Size (Bits):    256

    Active:                        True
    Actor SCI:                     e01a.ea2a.4f49/13f1
    Actor Priority:                128
    Key Server SCI:                e01a.ea2a.4f49/13f1
    Key Server Priority:           128
    Keys Distributed:              1
    Keys Received:                 0

    MACsec Settings Received:      True
    MACsec Settings Accepted:      True
    MACsec Cipher Suite:           GCM-AES-128
    MACsec Protection Mode:        Integrity and confidentiality

  General MACsec Info:

    Hardware Ready:                True
    Current Cipher Suite:          GCM-AES-128
    Cipher Suite Protection:       Integrity and confidentiality

    Input Data Pkts (Allowed):     3
    Input Data Pkts (Blocked):     0
    Input EAPOL Pkts:              2

    Output Data Pkts (OK):         5
    Output Data Pkts (Error):      0
    Output EAPOL Pkts:             6

  Frame Generation:

    Protect Frames:                True
    Always Include SCI:            True

    Pkts Untagged:                 0
    Pkts Too Long:                 0

    Bytes Protected Only:          0
    Bytes Encrypted:               240

  Frame Verification:

    Validate Frames:               Strict
    Replay Protect:                True
    Replay Window:                 0

    Pkts Untagged (Allowed):       0
    Pkts Untagged (Blocked):       0
    Pkts Bad Tag:                  0
    Pkts Unknown SCI (Allowed):    0
    Pkts Unknown SCI (Blocked):    0
    Pkts Overrun:                  0

    Bytes Validated Only:          0
    Bytes Decrypted:               144

  Transmit Channel e01a.ea2a.4f49/13f1:

    Created Time:                  2021-11-26 17:05:55

    Pkts Protected Only:           0
    Pkts Encrypted:                5

    Secure Association 0:

      Key Identifier:              913E1BEA38E05A53120AB44500000001
      Created Time:                2021-11-26 17:06:02
      In Use:                      True
      Next Packet Number:          0x00000006

      Pkts Protected Only:         0
      Pkts Encrypted:              5

  Receive Channel 0800.2775.c06d/0001:

    Created Time:                  2021-11-26 17:06:00

    Pkts OK:                       3
    Pkts Unchecked:                0
    Pkts Invalid (Allowed):        0
    Pkts Invalid (Blocked):        0
    Pkts Late (Allowed):           0
    Pkts Late (Blocked):           0

    Secure Association 0:

      Key Identifier:              913E1BEA38E05A53120AB44500000001
      Created Time:                2021-11-26 17:06:02
      In Use:                      True
      Next Packet Number:          0x00000004

      Pkts OK:                     3
      Pkts Invalid (Allowed):      0
      Pkts Invalid (Blocked):      0