show security mka statistics (MX Series)
Syntax
show security mka statistics <interface interface-name>
Description
Display MACsec Key Agreement (MKA) protocol statistics.
The output for this command does not include statistics for MACsec data traffic. For MACsec data traffic statistics, see show security macsec statistics.
Options
interface interface-name—(Optional) Display the MKA information for the specified interface only.none—Display the MKA information for all interfaces.
Required Privilege Level
view
Output Fields
Table 1 lists the
output fields for the show security mka statistics command.
Output fields are listed in the approximate order in which they appear.
Field Name |
Field Description |
|---|---|
|
Number of received MKA control packets. This counter increments for received MKA control packets only. This counter does not increment when data packets are received. |
|
Number of transmitted MKA packets This counter increments for transmitted MKA control packets only. This counter does not increment when data packets are transmitted. |
|
Number of version mismatch packets. |
|
Number of Connectivity Association Key (CAK) mismatch packets. This counter increments when the connectivity association key (CAK) and connectivity association key name (CKN), which are user-configured values that have to match to enable MACsec, do not match for an MKA control packet. |
|
Number of ICV mismatched packets. This counter increments when the connectivity association key (CAK) value does not match on both ends of a MACsec-secured Ethernet link. |
|
Number of duplicate message identifier packets. |
|
Number of duplicate message number packets. |
|
Number of duplicate source MAC address packets. |
|
Number of invalid destination MAC address packets. |
|
Number of formatting error packets. |
|
Number of old replayed message number packets. |
Sample Output
- show security mka statistics
- show security mka statistics (MX480 routers with MPC7E-10G)
- show security mka statistics (MX480 routers with MPC7E-10G)
show security mka statistics
user@host> show security mka statistics
Received packets: 1525844
Transmitted packets: 1525841
Version mismatch packets: 0
CAK mismatch packets: 0
ICV mismatch packets: 0
Duplicate message identifier packets: 0
Duplicate message number packets: 0
Duplicate address packets: 0
Invalid destination address packets: 0
Formatting error packets: 0
Old Replayed message number packets: 0
show security mka statistics (MX480 routers with MPC7E-10G)
user@host> show security mka statistics
Interface name: xe-4/0/18
Received packets: 73009
Transmitted packets: 73011
Version mismatch packets: 0
CAK mismatch packets: 1
ICV mismatch packets: 0
Duplicate message identifier packets: 0
Duplicate message number packets: 0
Duplicate address packets: 0
Invalid destination address packets: 0
Formatting error packets: 0
Old Replayed message number packets: 0show security mka statistics (MX480 routers with MPC7E-10G)
user@host> show security mka statistics interface xe-1/0/7
Received packets: 179211
Transmitted packets: 179186
Version mismatch packets: 0
CAK mismatch packets: 0
ICV mismatch packets: 0
Duplicate message identifier packets: 0
Duplicate message number packets: 0
Duplicate address packets: 0
Invalid destination address packets: 0
Formatting error packets: 0
Old Replayed message number packets: 0
Release Information
Command introduced in Junos OS Release 15.1.
Support for MPC7E-10G introduced in Junos OS Release 16.1R1 for MX240, MX480, and MX960 routers.