HP FlexNetwork 7500 Series, Справочник по командам

Страница: 691 / 738

676
Table 105 Command output
Field Description
MKPDUs with invalid CKN Number of received MKA packets with invalid CKNs.
MKPDUs with invalid ICV Number of MKA packets that failed ICV check.
MKPDUs with Rx error Number of received error MKA packets.
CKN for participant CAK name of the MKA instance.
Tx MKPDUs Number of the MKA packets sent by the MKA instance.
Rx MKPDUs Number of the MKA packets received by the MKA instance.
MKPDUs with invalid MN Number of MKA packets with illegal MNs received by the MKA instance.
MKPDUs with Tx error Number of error MKA packets sent by the MKA instance.
SAKs distributed Number of SAKs distributed by the MKA instance.
SAKs received Number of SAKs received by the MKA instance.
Related commands
reset mka statistics
macsec confidentiality-offset
Use macsec confidentiality-offset to set the MACsec confidentiality offset on a port.
Use undo macsec confidentiality-offset to restore the default.
Syntax
macsec confidentiality-offset offset-value
undo macsec confidentiality-offset
Default
The MACsec confidentiality offset on the port is 0. The entire frame is encrypted.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
offset-value : Specifies the confidentiality offset in bytes. The value can be 0, 30 or 50.
Usage guidelines
The MACsec confidentiality offset specifies the number of bytes starting from the frame header.
MACsec encrypts only the bytes after the offset in a frame.
If you execute this command on a port to which an MKA policy has been applied, the configuration
overwrites the confidentiality offset in the MKA policy. The MKA policy application is removed from
the port. However, other settings (settings for parameters except the confidentiality offset) of the
MKA policy are effective on the port.
MACsec uses the MACsec confidentiality offset propagated by the key server.