7-85
Cisco TrustSec Configuration Guide
OL-22192-01
Chapter 7 Cisco TrustSec Command Summary
show cts macsec
show cts macsec
To display crypto ASIC packet counters per interface related to CTS link-to-link encryption, use the
show cts macsec command.
show cts macsec counters interface interface_type slot/port [delta]
Syntax Description
Command Modes EXEC (>); Privileged EXEC (#)
Supported User Roles Administrator
Command History
Usage Guidelines This command displays the crypto ASIC packet counters per interface. If Security Associations (SA) are
installed (through NDAC or sap cts interface do1x or manual subcommands), the active SA's counters
are displayed. Only one SA is active at a time. Supported values for SAs are 1 and 2. The delta keyword
lists the counter values since the clear cts macsec counters interface command was issued.
Examples The following example displays the MACsec counters of a manually configured CTS uplink interface on
a Catalyst 6500 series switch:
router# show cts macsec counters interface gigabitEthernet 6/2
CTS Security Statistic Counters:
rxL2UntaggedPkts = 0
rxL2NotagPkts = 0
rxL2SCMissPkts = 0
rxL2CTRLPkts = 0
rxL3CTRLPkts = 0
rxL3UnknownSAPkts = 0
rxL2BadTagPkts = 0
txL2UntaggedPkts = 0
txL2CtrlPkts = 0
txL3CtrlPkts = 0
txL3UnknownSA = 0
GENERIC Counters:
CRCAlignErrors = 0
UndersizedPkts = 0
OversizedPkts = 0
FragmentPkts = 0
Jabbers = 0
Collisions = 0
InErrors = 0
OutErrors = 0
interface interface_type slot/port Specifies the CTS MACsec interface.
delta Displays counter values since the last time cleared.
Release Modification
12.2(50) SY This command was introduced on the Catalyst 6500 Series Switches.