Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

show security mka statistics

 

Syntax

Release Information

Command introduced in Junos OS Release 15.1X49-D60.

Description

Display MACsec Key Agreement (MKA) protocol statistics.

The output for this command does not include statistics for MACsec data traffic. For MACsec data traffic statistics, see show security macsec statistics (SRX Series Devices).

Options

  • interface interface-name—(Optional) Display the MKA information for the specified interface only.

Required Privilege Level

view

List of Sample Output

show security mka statistics

Output Fields

Table 1 lists the output fields for the show security mka statistics command. Output fields are listed in the approximate order in which they appear.

Table 1: show security mka statistics Output Fields

Field Name

Field Description

Received packets

Number of received MKA control packets.

This counter increments for received MKA control packets only. This counter does not increment when data packets are received.

Transmitted packets

Number of transmitted MKA packets

This counter increments for transmitted MKA control packets only. This counter does not increment when data packets are transmitted.

Version mismatch packets

Number of version mismatch packets.

CAK mismatch packets

Number of Connectivity Association Key (CAK) mismatch packets.

This counter increments when the connectivity association key (CAK) and connectivity association key name (CKN), which are user-configured values that have to match to enable MACsec, do not match for an MKA control packet.

ICV mismatch packets

Number of ICV mismatched packets.

This counter increments when the connectivity association key (CAK) value does not match on both ends of a MACsec-secured Ethernet link.

Duplicate message identifier packets

Number of duplicate message identifier packets.

Duplicate message number packets

Number of duplicate message number packets.

Duplicate address packets

Number of duplicate source MAC address packets.

Invalid destination address packets

Number of invalid destination MAC address packets.

Formatting error packets

Number of formatting error packets.

Old Replayed message number packets

Number of old replayed message number packets.

Sample Output

show security mka statistics

user@host> show security mka statistics