MACsec SFP

Tim Durack tdurack at gmail.com
Wed Jun 25 22:10:38 UTC 2014


On Cisco equipment supporting MACsec, EAP and MKA is of course configured
through the normal cli.
On Wednesday, June 25, 2014, Pieter Hulshoff <phulshof at aimvalley.nl> wrote:

> On 25-06-14 22:45, Christopher Morrow wrote:
>
>> today you program the key (on switches that do macsec, not in an SFP
>> that does it for you, cause those don't exist, yet) in your router
>> config and as near as I have seen there isn't a key distribution
>> protocol aside from that which you write/manage yourself and which is
>> likely using ssh/snmp(ick)/telnet(ick).
>>
>
> I'm not familiar with the MACsec key distribution available in current
> routers/switches. Are you saying Cisco doesn't support EAP and/or MKA for
> this purpose or just that the command protocol for configuring EAP/MKA is
> run via SSH/SNMP/telnet?
>
> Kind regards,
>
> Pieter Hulshoff
>
>

-- 
Tim:>



More information about the NANOG mailing list