show macsec statistics
ethernet
Displays status information and secure channel statistics for the designated MACsec
interface.
Parameters
Modes
User EXEC mode
Usage Guidelines
MACsec commands are supported only on ICX 7650 and ICX 7850 devices.
It is recommended that you use the
clear macsec
command to clear previous results for the
show macsec statistics
command before re-executing it.
Output can only be obtained on the active unit.
The
show macsec statistics command displays the following information:
| Output field | Description |
|---|---|
| Interface (Device/slot/port) | The information that follows describes the designated interface. |
| Replay Protection (Enabled, Disabled) | Indicates whether replay protection is applied on the interface. |
| Replay Window (0 through 127) | If out-of-order packets are allowed, indicates allowable window within which an out-of-order packet can be received. |
| Frame Validation (Enabled, Disabled) | Indicates whether MACsec frame headers are checked. |
| Secure Channel Statistics: | The fields that follow describe activity on a secure channel established over the designated interface. |
| TxPktProtectedOnly | Number of transmitted packets with integrity protection only. |
| TxOctetProtectedOnly | Number of bytes transmitted in packets with integrity protection only. |
| TxPktEncrypted | Number of transmitted packets that are encrypted. |
| TxOctetEncrypted | Number of bytes transmitted in encrypted packets. |
| TxPktMiss | Number of transmitted packets that are neither encrypted nor protected by integrity check. |
| TxOctetMiss | Number of bytes transmitted in packets that are neither encrypted nor protected by integrity checking. |
| TxPktDrop | Number of packets dropped at transmission because SAK has been exhausted. |
| TxPktBad | Number of transmitted packets marked as bad. |
| RxPktDecryptedAuth | Number of packets received, decrypted, and checked for integrity protection. |
| RxOctetTotal | Number of bytes received. |
| RxOctetAuthOnly | Number of bytes received with Integrity protection only. |
| RxOctetDecrypted | Number of bytes received and decrypted. |
| RxPktFailReplayCheck | Number of packets received out of order. |
| RxPktFailICVCheck | Number of packets received that failed Integrity checking. |
| RxPktNoMACsecTag | Number of packets received without a MACSec Tag. |
| RxPktFrameValFail | Number of packets received that failed MACsec frame validation. |
| RxPktMiss | Number of packets received that did not find a key for decryption. |
| RxOctetMiss | Number of bytes received that did not find a key for decryption. |
| RxPktDrop | Number of received packets that were dropped. |
Examples
History