show dot1x-mka config-group

Shows details for the specified MACsec Key Agreement (MKA) groups configured on this device, or for a designated MKA group.
Syntax
show dot1x-mka config-groupgroup-name
Parameters
group-name
Limits the group configuration displayed to the named MKA group.
Modes

User EXEC mode

The show dot1x-mka config-group command displays the following information:

Output field Description

mka-cfg-group

The configuration details that follow are for the specified MACsec MKA group.

key-server-priority

The key-server priority for MACsec transmissions on the named group is set at te specified value.

macsec cipher-suite gcm-aes-128

or

macsec cipher-suite gcm-aes-128 integrity-only

MACsec transmissions are encrypted.

or

ICV checking only is performed.

macsec confidentiality-offset

The byte offset used for encrypted data is set to the value shown. Allowable values are 0, 30 (the first 30 bytes of data are not encrypted), and 50 (the first 50 bytes of data are not encrypted).

macsec frame-validation {check | discard}

Indicates whether the MACsec frame header is checked and what action is taken for invalid frames (counted or discarded).

macsec replay-protection {strict | out-of-order window-size size}

Replay protection is enabled. The type of protection is shown as strict (discard any frame received out of sequence) or as allowing receipt of out-of-sequence frames within the specified window.

Examples

The following example lists the configuration details for MKA group test1. 

device(config-dot1x-mka-1/3/2)# show dot1x-mka config-group test1
 
mka-cfg-group test1
  key-server-priority 5
  macsec cipher-suite gcm-aes-128 integrity-only
  macsec confidentiality-offset 30
  macsec frame-validation check
		macsec replay-protection strict
History
Release version Command history
08.0.20 This command was introduced.
08.0.30 Support for this command was added on ICX 7450 devices.
08.0.70 Support for this command was added on ICX 7650 devices.
08.0.90 Support for this command was added on ICX 7850 devices.
Parent topic: Show Commands