Cisco Catalyst 3560X-24P User Manual

2-697
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
Chapter 2 Catalyst 3750-X and 3560-X Cisco IOS Commands
show mka session
Port-ID Local-TxSCI Key-Svr Status CKN
================================================================================
Gi1/0/1 001b.213d.28ed/0000 *DEFAULT POLICY* 02020202000000000000EAA6
2 001e.bdfe.8402/0002 YES Secured 3A06ECB1183E42BB4D7817EB2B949D0E
Gi1/0/1 001a.323a.38ef/0000 *DEFAULT POLICY* 02020314000000000000EAB9
3 001e.bdfe.8402/0003 YES Pending CFB1E3B513344AB3417E17FBCB449D3A
Gi1/0/2 001c.113f.2d3a/0000 MkaPolicy-1 02020533000000000000EC81
2 001e.bdfe.8402/0002 YES Secured F103EABB133F4AB3497312EF2A949A03
This is sample output of the show mka session detail command:
Switch# show mka session detail
MKA Detailed Status for MKA Session
===================================
Status: SECURED - Secured MKA Session with MACsec
Local Tx-SCI............. 0022.bdcf.9a01/0002
Interface MAC Address.... 0022.bdcf.9a01
MKA Port Identifier...... 2
Interface Name........... GigabitEthernet1/0/1
Audit Session ID......... 0B0B0B3D0000034F050FA69B
CAK Name (CKN)........... 46EFE9FE85199FE404FB7AFA3FD0732E
Member Identifier (MI)... D7B00EDA353242704CC6B0DB
Message Number (MN)...... 7
Authenticator............ YES
Key Server............... YES
Latest SAK Status........ Rx & Tx
Latest SAK AN............ 0
Latest SAK KI (KN)....... D7B00EDA353242704CC6B0DB00000001 (1)
Old SAK Status........... FIRST-SAK
Old SAK AN............... 0
Old SAK KI (KN).......... FIRST-SAK (0)
SAK Transmit Wait Time... 0s (Not waiting for any peers to respond)
SAK Retire Time.......... 0s (No Old SAK to retire)
MKA Policy Name.......... *DEFAULT POLICY*
Key Server Priority...... 0
Ta b l e 2-42 show mka session Output Fields
Field Description
Interface The short name of the physical interface on which the MKA session is active.
Peer-RxSCI The MAC address of the interface of the peer concatenated with the peer 16-bit
Port-ID.
Policy-name The name of the policy used at session start to set initial configuration values.
Audit session ID Session ID.
Port-ID The Port-ID used in the Local-TX-SCI.
Local-TxSCI The MAC address of the physical interface concatenated with the 16-bit
Port-ID.
Key Server Status The key server: has value ‘Y’ for YES if the MKA session is the key server,
otherwise, ‘N’ for NO.
CKN Connectivity association key (CAK) name

Cisco Catalyst 3560X-24P Specifications

General

Brand	Cisco
Model	Catalyst 3560X-24P
Category	Switch
Language	English