show macsec mka
----------------
3634B7ADE028833E219C2304
92D6F93C2BC4058AD25FA0E5
This example shows how to display the MKA statistics for a specified interface:
switch#
Per-CA MKA Statistics for Session on interface (Ethernet11/25) with CKN 0x1
============================================================================
CA Statistics
Pairwise CAK Rekeys..... 0
SA Statistics
SAKs Generated.......... 0
SAKs Rekeyed............ 0
SAKs Received........... 60
SAK Responses Received.. 0
MKPDU Statistics
MKPDUs Transmitted...... 18676
"Distributed SAK".. 0
MKPDUs Validated & Rx... 55986
"Distributed SAK".. 60
MKA Statistics for Session on interface (Ethernet11/25)
=======================================================
CA Statistics
Pairwise CAK Rekeys..... 0
SA Statistics
SAKs Generated.......... 0
SAKs Rekeyed............ 0
SAKs Received........... 60
SAK Responses Received.. 0
MKPDU Statistics
MKPDUs Transmitted...... 18676
"Distributed SAK".. 0
MKPDUs Validated & Rx... 55986
"Distributed SAK".. 60
MKA IDB Statistics
MKPDUs Tx Success.......... 19147
MKPDUs Tx Fail............. 0
MKPDUS Tx Pkt build fail... 0
MKPDUS No Tx on intf down.. 0
MKPDUS No Rx on intf down.. 0
MKPDUs Rx CA Not found..... 0
MKPDUs Rx Error............ 0
MKPDUs Rx Success.......... 55986
MKPDU Failures
MKPDU Rx Validation ..................... 0
MKPDU Rx Bad Peer MN..................... 0
MKPDU Rx Non-recent Peerlist MN.......... 0
MKPDU Rx Drop SAKUSE, KN mismatch........ 0
MKPDU Rx Drop SAKUSE, Rx Not Set......... 0
MKPDU Rx Drop SAKUSE, Key MI mismatch.... 0
MKPDU Rx Drop SAKUSE, AN Not in Use...... 0
MKPDU Rx Drop SAKUSE, KS Rx/Tx Not Set... 16956
MKPDU Rx Drop Packet, Ethertype Mismatch. 0
SAK Failures
SAK Generation................... 0
Hash Key Generation.............. 0
SAK Encryption/Wrap.............. 0
SAK Decryption/Unwrap............ 0
CA Failures
ICK Derivation................... 0
Cisco Nexus 7000 Series Security Command Reference
840
7624
7655
show macsec mka statistics interface ethernet 11/25
9c57.adfc.0f34/0001 1
5006.ab91.4584/0001 3
Show Commands
16
Yes
16
Yes