show security mka statistics
Syntax
show security mka statistics <interface interface-name>
Description
Display MACsec Key Agreement (MKA) protocol statistics.
The output for this command does not include statistics for MACsec data traffic. For MACsec data traffic statistics, see show security macsec statistics (SRX Series Devices).
Options
interface interface-name
—(Optional) Display the MKA information for the specified interface only.
Required Privilege Level
view
Output Fields
Table 1 lists the
output fields for the show security mka statistics
command.
Output fields are listed in the approximate order in which they appear.
Field Name |
Field Description |
---|---|
|
Number of received MKA control packets. This counter increments for received MKA control packets only. This counter does not increment when data packets are received. |
|
Number of transmitted MKA packets This counter increments for transmitted MKA control packets only. This counter does not increment when data packets are transmitted. |
|
Number of version mismatch packets. |
|
Number of Connectivity Association Key (CAK) mismatch packets. This counter increments when the connectivity association key (CAK) and connectivity association key name (CKN), which are user-configured values that have to match to enable MACsec, do not match for an MKA control packet. |
|
Number of ICV mismatched packets. This counter increments when the connectivity association key (CAK) value does not match on both ends of a MACsec-secured Ethernet link. |
|
Number of duplicate message identifier packets. |
|
Number of duplicate message number packets. |
|
Number of duplicate source MAC address packets. |
|
Number of invalid destination MAC address packets. |
|
Number of formatting error packets. |
|
Number of old replayed message number packets. |
Sample Output
show security mka statistics
user@host> show security mka statistics Interface name: fxp1 Received packets: 3 Transmitted packets: 14 Version mismatch packets: 0 CAK mismatch packets: 0 ICV mismatch packets: 0 Duplicate message identifier packets: 0 Duplicate message number packets: 0 Duplicate address packets: 0 Invalid destination address packets: 0 Formatting error packets: 0 Old Replayed message number packets: 0
Release Information
Command introduced in Junos OS Release 15.1X49-D60.