Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show security macsec connections (SRX)

date_range 11-Jun-24

Syntax

content_copy zoom_out_map
show security macsec connections
<interface interface-name>

Description

Display the status of the active MACsec connections on the device.

Options

none

Display MACsec connection information for all interfaces on the device.

interface interface-name

(Optional) Display MACsec connection information for the specified interface only.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security macsec connections command. Output fields are listed in the approximate order in which they appear.

Table 1: show security macsec connections Output Fields

Field Name

Field Description

Fields for Interface

Interface name

Name of the interface.

CA name

Name of the connectivity association.

A connectivity association is named using the connectivity-association statement when you are enabling MACsec.

Cipher suite

Name of the cipher suite used for encryption.

Key server offset

Offset setting.

The offset is set using the offset statement when configuring the connectivity association when using static connectivity association key (CAK) or dynamic security mode.

Replay protect

Replay protection setting. Replay protection is enabled when this output is on and disabled when this output is off.

You can enable replay protection using the replay-protect statement in the connectivity association.

Outbound secure channels

Displays outgoing packet number.

Inbound secure channels

Displays source identifier and secure associations detail.

Sample Output

show security macsec connections

content_copy zoom_out_map
user@host> show security macsec connections
Interface name: fxp1
        CA name: ca1
        Cipher suite: GCM-AES-128   Encryption: on
        Key server offset: 0        Include SCI: no
        Replay protect: off         Replay window: 0
       

show security macsec connections (SRX1600 and SRX2300)

content_copy zoom_out_map
user@host> show security macsec connections
    Interface name: em0
        CA name: ca_mka_01
        Cipher suite: GCM-AES-128   Encryption: on
        Key server offset: 0        Include SCI: no
        Replay protect: off         Replay window: 0
          Outbound secure channels
            SC Id: 02:00:00:01:01:04/1
            Outgoing packet number: 1914287
            Secure associations
            AN: 0 Status: inuse Create time: 07:33:26
          Inbound secure channels
            SC Id: 02:00:00:02:01:04/1
            Secure associations
            AN: 0 Status: inuse Create time: 07:33:26

    Interface name: em1
        CA name: ca_mka_01
        Cipher suite: GCM-AES-128   Encryption: on
        Key server offset: 0        Include SCI: no
        Replay protect: off         Replay window: 0
          Outbound secure channels
            SC Id: 02:00:01:01:01:04/1
            Outgoing packet number: 108885
            Secure associations
            AN: 0 Status: inuse Create time: 07:33:26
          Inbound secure channels
            SC Id: 02:00:01:02:01:04/1
            Secure associations
            AN: 0 Status: inuse Create time: 07:33:26

Release Information

Command introduced in Junos OS Release 15.1X49-D60.

footer-navigation