Questions tagged [macsec]
8 questions
12
votes
2 answers
Encryption over gigabit carrier ethernet
My conclusion to this was to pipe VLAN trunks through EoIP tunnels
and encapsulate those in hardware assisted IPSec. Two pairs of fairly
inexpensive Mikrotik RB1100AHx2 routers proved capable of saturating a 1 Gbps
connection while adding…
Roy
- 4,376
- 4
- 36
- 53
3
votes
2 answers
Can a switch that doesnt know anything about 802.1ae macsec route macsec frames?
If one device (e.g. A wireless router) is attempting to communicate with another device (e.g. some gateway to another network) through a unmanaged switch and the router is ciphering frames it transmits using 802.1ae macsec (which the gateway also…
Bob
- 130
- 6
3
votes
0 answers
macsec interface using wpa_supplicant ( 802.1X-2010 )
I have created a wpa_supplicant.conf file for macsec. I'd like to use the the Macsec Key Agreement protocol to establish the session keys and create a secure channel.
I have the following wpa_supplicant.conf file.
[root@localhost ~]# cat…
hoffmeister
- 131
- 3
1
vote
1 answer
MACSec in virtual Ethernet adapters
Can I use MACSec in the virtual Ethernet adapters(containers or VMs) without configuring it in the physical MAC address?
There were multiple examples of MACSec implementation in VMs in the internet but all were using the physical address for the…
Lucid lynx
- 11
- 2
1
vote
1 answer
Switch to switch encryption over a wireless bridge (TrustSec?)
I am planning to connect an existing Cisco 3750 switch to a 3560C switch over a wireless PTP bridge. The bridge will be WPA2 protected, but I am looking for an additional measure of security between the switches to prevent other wireless access…
metatheorem
- 113
- 2
1
vote
0 answers
How to configure MACSEC Key Agreement (MKA) with hostapd & wpasupplicant?
I'm trying to setup MKA between some clients (using wpa_supplicant) and an authenticator (using hostapd).
Additionally I have a RADIUS server(using FreeRADIUS) that is going to be handling the authentication side of things.
So:
RADIUS server has…
A. Trevelyan
- 478
- 1
- 10
0
votes
1 answer
Why MACsec can not reach more than 2Gbits/s?
i am configuring macsec and i have discovered that, when using this protocol to send/received data, the bitrate is so low.
I am using it over a 10Gb network adaptor, using iperf3 it almost reach that value but when using MACsec over that interface,…
RandomUser8888
- 1
- 1
-1
votes
1 answer
MACSec encryption over PBN?
This came up in a more generic link layer encryption question:
Commodity switches with MACSec hardware offers wirespeed AES-GCM encryption at a fraction of the cost typically associated with layer 2 encryption.
Is it at all possible to extend MACSec…
Roy
- 4,376
- 4
- 36
- 53