show security mka statistics
Syntax
Release Information
Command introduced in Junos OS Release 15.1X49-D60.
Description
Display MACsec Key Agreement (MKA) protocol statistics.
The output for this command does not include statistics for MACsec data traffic. For MACsec data traffic statistics, see show security macsec statistics (SRX Series Devices).
Options
interface interface-name—(Optional) Display the MKA information for the specified interface only.
Required Privilege Level
view
Related Documentation
List of Sample Output
show security mka statisticsOutput Fields
Table 1 lists the output fields for the show security mka statistics command. Output fields are listed in the approximate order in which they appear.
Table 1: show security mka statistics Output Fields
Field Name | Field Description |
|---|---|
Received packets | Number of received MKA control packets. This counter increments for received MKA control packets only. This counter does not increment when data packets are received. |
Transmitted packets | Number of transmitted MKA packets This counter increments for transmitted MKA control packets only. This counter does not increment when data packets are transmitted. |
Version mismatch packets | Number of version mismatch packets. |
CAK mismatch packets | Number of Connectivity Association Key (CAK) mismatch packets. This counter increments when the connectivity association key (CAK) and connectivity association key name (CKN), which are user-configured values that have to match to enable MACsec, do not match for an MKA control packet. |
ICV mismatch packets | Number of ICV mismatched packets. This counter increments when the connectivity association key (CAK) value does not match on both ends of a MACsec-secured Ethernet link. |
Duplicate message identifier packets | Number of duplicate message identifier packets. |
Duplicate message number packets | Number of duplicate message number packets. |
Duplicate address packets | Number of duplicate source MAC address packets. |
Invalid destination address packets | Number of invalid destination MAC address packets. |
Formatting error packets | Number of formatting error packets. |
Old Replayed message number packets | Number of old replayed message number packets. |
Sample Output
show security mka statistics
user@host> show security mka statistics
Interface name: fxp1
Received packets: 3
Transmitted packets: 14
Version mismatch packets: 0
CAK mismatch packets: 0
ICV mismatch packets: 0
Duplicate message identifier packets: 0
Duplicate message number packets: 0
Duplicate address packets: 0
Invalid destination address packets: 0
Formatting error packets: 0
Old Replayed message number packets: 0