Cisco Catalyst 3560X-24P Command Reference Manual page 729

Chapter 2 Catalyst 3750-X and 3560-X Cisco IOS Commands
Port-ID
================================================================================
Gi1/0/1
2
Gi1/0/1
3
Gi1/0/2
2
Table 2-42
Field
Interface
Peer-RxSCI
Policy-name
Audit session ID
Port-ID
Local-TxSCI
Key Server Status
CKN
This is sample output of the show mka session detail command:
Switch# show mka session detail
MKA Detailed Status for MKA Session
===================================
Status: SECURED - Secured MKA Session with MACsec
Local Tx-SCI............. 0022.bdcf.9a01/0002
Interface MAC Address.... 0022.bdcf.9a01
MKA Port Identifier...... 2
Interface Name........... GigabitEthernet1/0/1
Audit Session ID......... 0B0B0B3D0000034F050FA69B
CAK Name (CKN)........... 46EFE9FE85199FE404FB7AFA3FD0732E
Member Identifier (MI)... D7B00EDA353242704CC6B0DB
Message Number (MN)...... 7
Authenticator............ YES
Key Server............... YES
Latest SAK Status........ Rx & Tx
Latest SAK AN............ 0
Latest SAK KI (KN)....... D7B00EDA353242704CC6B0DB00000001 (1)
Old SAK Status........... FIRST-SAK
Old SAK AN............... 0
Old SAK KI (KN).......... FIRST-SAK (0)
SAK Transmit Wait Time... 0s (Not waiting for any peers to respond)
SAK Retire Time.......... 0s (No Old SAK to retire)
MKA Policy Name.......... *DEFAULT POLICY*
Key Server Priority...... 0
OL-21522-02
Local-TxSCI Key-Svr Status
001b.213d.28ed/0000 *DEFAULT POLICY* 02020202000000000000EAA6
001e.bdfe.8402/0002 YES
001a.323a.38ef/0000 *DEFAULT POLICY* 02020314000000000000EAB9
001e.bdfe.8402/0003 YES
001c.113f.2d3a/0000 MkaPolicy-1
001e.bdfe.8402/0002 YES
show mka session Output Fields
Description
The short name of the physical interface on which the MKA session is active.
The MAC address of the interface of the peer concatenated with the peer 16-bit
Port-ID.
The name of the policy used at session start to set initial configuration values.
Session ID.
The Port-ID used in the Local-TX-SCI.
The MAC address of the physical interface concatenated with the 16-bit
Port-ID.
The key server: has value 'Y' for YES if the MKA session is the key server,
otherwise, 'N' for NO.
Connectivity association key (CAK) name
CKN
Secured 3A06ECB1183E42BB4D7817EB2B949D0E
Pending CFB1E3B513344AB3417E17FBCB449D3A
02020533000000000000EC81
Secured F103EABB133F4AB3497312EF2A949A03
Catalyst 3750-X and 3560-X Switch Command Reference
show mka session
2-697