MACsec SFP

Christopher Morrow morrowc.lists at gmail.com
Wed Jun 25 05:21:27 UTC 2014


On Tue, Jun 24, 2014 at 6:30 PM, Randy Bush <randy at psg.com> wrote:
>>> Solution could be same as for tunable optics, first you tune with
>>> eeprommer until CLI gets support.
>>> Remote legs could have their own eeprommer, which can be easy enough
>>> to use not to require training and costs like 10EUR.
>> it's going to be hard to schedule a key roll then, right?
>
> i have always been fond of rfc 4808 and not the unnecessarily complex
> alternatives such as tcp-ao.

sure... but to do this you have to be able to program the keys from
the platform the SFP is plugged into.. .not via the sfp itself
(outside the chassis)



More information about the NANOG mailing list