Cisco TrustSec Configuration Manual page 171

Chapter 7 Cisco TrustSec Command Summary
show cts macsec
To display crypto ASIC packet counters per interface related to CTS link-to-link encryption, use the
show cts macsec command.
Syntax Description interface interface_type slot/port
delta
Command Modes EXEC (>); Privileged EXEC (#)
Supported User Roles Administrator
Command History Release
12.2(50) SY
Usage Guidelines This command displays the crypto ASIC packet counters per interface. If Security Associations (SA) are
installed (through NDAC or sap cts interface do1x or manual subcommands), the active SA's counters
are displayed. Only one SA is active at a time. Supported values for SAs are 1 and 2. The delta keyword
lists the counter values since the clear cts macsec counters interface command was issued.
Examples
The following example displays the MACsec counters of a manually configured CTS uplink interface on
a Catalyst 6500 series switch:
router# show cts macsec counters interface gigabitEthernet 6/2
CTS Security Statistic Counters:
GENERIC Counters:
OL-22192-01
show cts macsec counters interface interface_type slot/port [delta]
Modification
This command was introduced on the Catalyst 6500 Series Switches.
rxL2UntaggedPkts = 0
rxL2NotagPkts = 0
rxL2SCMissPkts = 0
rxL2CTRLPkts = 0
rxL3CTRLPkts = 0
rxL3UnknownSAPkts = 0
rxL2BadTagPkts = 0
txL2UntaggedPkts = 0
txL2CtrlPkts = 0
txL3CtrlPkts = 0
txL3UnknownSA = 0
CRCAlignErrors = 0
UndersizedPkts = 0
OversizedPkts = 0
FragmentPkts = 0
Collisions = 0
Specifies the CTS MACsec interface.
Displays counter values since the last time cleared.
Jabbers = 0
InErrors = 0
OutErrors = 0
show cts macsec
Cisco TrustSec Configuration Guide
7-85