show dot1x-mka config

dot1x-mka-enable

MACsec is enabled on the device.

enable-mka ethernet device/slot/port

The ethernet interfaces specified are enabled for MACsec.

mka-cfg-group group-name

The configuration details that follow are for the named MACsec MKA group.

key-server-priority value

The key server priority for MACsec transmissions on the named group is set at this value.

macsec cipher-suite gcm-aes-128

or

macsec cipher-suite gcm-aes-128 integrity-only

MACsec encryptions between members of the group are encrypted.

or

ICV checking only is performed, but no encryption is performed.

macsec confidentiality-offset value

The byte offset used for encrypted data is set to the value shown. Allowable values are 0, 30 (the first 30 bytes of data are not encrypted), and 50 (the first 50 bytes of data are not encrypted).

macsec frame-validation { check | discard }

For transmissions between MKA group members, indicates whether the MACsec frame header is checked and what action is taken for invalid frames (counted or discarded).

macsec-replay protection { strict | out-of-order window-size value }

Replay protection is enabled. The type of protection is shown as strict (discard any frame received out of sequence) or as allowing receipt of out-of-sequence frames within the specified window.

key value name value

The pre-shared key is set to this value and name for the MKA configuration group. Both key and name are hexadecimal strings.

enable ethernet device/slot/port

mka-cfg-group name

key hexadecimal value name hexadecimal value

The specified interface is enabled for MACsec. The interface belongs to the named MKA group, and the interface uses the pre-shared key shown to confirm peers with which it can communicate.