Questions tagged [macsec]

6 questions
12
votes
2 answers

Encryption over gigabit carrier ethernet

My conclusion to this was to pipe VLAN trunks through EoIP tunnels and encapsulate those in hardware assisted IPSec. Two pairs of fairly inexpensive Mikrotik RB1100AHx2 routers proved capable of saturating a 1 Gbps connection while adding…
Roy
  • 4,256
  • 4
  • 35
  • 50
3
votes
2 answers

Can a switch that doesnt know anything about 802.1ae macsec route macsec frames?

If one device (e.g. A wireless router) is attempting to communicate with another device (e.g. some gateway to another network) through a unmanaged switch and the router is ciphering frames it transmits using 802.1ae macsec (which the gateway also…
Bob
  • 130
  • 6
2
votes
0 answers

macsec interface using wpa_supplicant ( 802.1X-2010 )

I have created a wpa_supplicant.conf file for macsec. I'd like to use the the Macsec Key Agreement protocol to establish the session keys and create a secure channel. I have the following wpa_supplicant.conf file. [root@localhost ~]# cat…
hoffmeister
  • 121
  • 2
1
vote
1 answer

MACSec in virtual Ethernet adapters

Can I use MACSec in the virtual Ethernet adapters(containers or VMs) without configuring it in the physical MAC address? There were multiple examples of MACSec implementation in VMs in the internet but all were using the physical address for the…
Lucid lynx
  • 11
  • 2
1
vote
1 answer

Switch to switch encryption over a wireless bridge (TrustSec?)

I am planning to connect an existing Cisco 3750 switch to a 3560C switch over a wireless PTP bridge. The bridge will be WPA2 protected, but I am looking for an additional measure of security between the switches to prevent other wireless access…
metatheorem
  • 113
  • 2
-1
votes
1 answer

MACSec encryption over PBN?

This came up in a more generic link layer encryption question: Commodity switches with MACSec hardware offers wirespeed AES-GCM encryption at a fraction of the cost typically associated with layer 2 encryption. Is it at all possible to extend MACSec…
Roy
  • 4,256
  • 4
  • 35
  • 50