nanog mailing list archives

Re: MACsec SFP


From: Pieter Hulshoff <phulshof () aimvalley nl>
Date: Wed, 25 Jun 2014 22:51:04 +0200

On 25-06-14 22:45, Christopher Morrow wrote:
today you program the key (on switches that do macsec, not in an SFP
that does it for you, cause those don't exist, yet) in your router
config and as near as I have seen there isn't a key distribution
protocol aside from that which you write/manage yourself and which is
likely using ssh/snmp(ick)/telnet(ick).

I'm not familiar with the MACsec key distribution available in current routers/switches. Are you saying Cisco doesn't support EAP and/or MKA for this purpose or just that the command protocol for configuring EAP/MKA is run via SSH/SNMP/telnet?

Kind regards,

Pieter Hulshoff


Current thread: