Cisco Catalyst 3750-X Command Reference Manual page 778
Cisco ios release 15.2(1)e and later
Hide thumbs
Also See for Catalyst 3750-X:
- Software configuration manual (1438 pages) ,
- Message manual (150 pages) ,
- Getting started manual (22 pages)
Table of Contents
Advertisement
show mka policy
Table 2-41
Field
Policy Name
KS Priority
Delay Protect
Replay Protect
Window Size
Conf Offset
Interfaces Applied
This is sample output of the show mka policy detail command:
Switch# show mka policy MkaPolicy detail
MKA Policy Configuration ("MkaPolicy-3")
========================
MKA Policy Name........ MkaPolicy-3
Key Server Priority.... 0
Delay Protection....... NO
Replay Protection...... YES
Replay Window Size..... 64
Confidentiality Offset. 30
Applied Interfaces...
GigabitEthernet1/0/4
GigabitEthernet1/0/6
This is sample output of the show mka policy sessions command:
Switch# show mka policy replay-policy sessions
Summary of All Active MKA Sessions with MKA Policy "replay-policy"...
Interface Peer-RxSCI
Port-ID
================================================================================
Gi1/0/25
2
Catalyst 3750-X and 3560-X Switch Command Reference
2-746
show mka policy Output FIelds
Description
The string identifier of the policy.
The set value of the priority for becoming the key server (KS). The range is
0 to 255, with 0 as the highest priority and 255 as the lowest priority. A value
of 0 means that the switch should always try to act as the key server, while
a value of 255 means that it should never try to act as the server. This value
is not configurable.
The set value of delay protection being provided. This value is not
configurable.
The configured value of replay protection being provided. (This is
configurable by entering the replay-protection window-size command.)
The configured size of the replay protection window in number of frames
per packet. If replay protection is off, the value is 0. If replay protection is
on and the value is 0, a strict in-order verification of MACsec frames occurs.
(This is configurable by entering the replay-protection window-size
command.)
The configured value of the confidentiality offset in the number of bytes to
offset protection or encryption into each frame in MACsec. Configurable
values are 0 (no offset), 30, or 50 bytes.
The short name of each interface on which this policy is applied. The string
is empty if it is not applied to any interfaces.
GigabitEthernet1/0/5
Policy-Name
Local-TxSCI
Key-Svr Status
001b.2140.ec3c/0000 replay-policy
001e.bdfe.6d99/0002 YES
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Audit-Session-ID
CKN
0A05783B0000001700448BA8
Secured
3808F996026DFB8A2FCEC9A88BBD0680
OL-29704-01
Advertisement
Table of Contents
