[alcatel-nsp] MACSEC transparency on null encap epipe service on 7750 or 7210 SAS-M

[Rabadan, Jorge (Jorge)]

Hi,

MACsec uses 802.1x for authentication, key exchange, etc.
Since 12.0R1 we can tunnel 802.1x in the 7750.

From the 12.0R3 release notes:

802.1X TUNNELING

In Release 12.0.R1, tunneling of untagged 802.1x frames received on a port is now supported for both Epipe and VPLS services using either null or default SAPs when the port dot1x port- control is set to force-auth. This feature requires FP2- or higher-based line cards or a 7750 SR- c4/c12.

Thx
Jorge

From: Pawel Sikora <Pawel_Sikora at netia.pl<mailto:Pawel_Sikora at netia.pl>>
Date: Wednesday, July 2, 2014 at 3:11 AM
To: "alcatel-nsp at puck.nether.net<mailto:alcatel-nsp at puck.nether.net>" <alcatel-nsp at puck.nether.net<mailto:alcatel-nsp at puck.nether.net>>
Subject: [alcatel-nsp] MACSEC transparency on null encap epipe service on 7750 or 7210 SAS-M

Hi everybody.
Quick question - could the EPL made of epipe service transparently pass MacSec encrypted traffic (802.1AE) and EAPOL frames  ?

Thanks
Pawel/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/alcatel-nsp/attachments/20140702/8e2677fd/attachment.html>