[c-nsp] 802.1AE MACsec over Non-MACsec MAN Ethernet Provider

Aaron DuShey adushey at gmail.com
Fri May 8 11:33:22 EDT 2015


Depends on the carrier. Find out how they handle a multicast dmac
01:80:0c:00:00:03, etype 0x888e (EAPOL). If they cannot forward, some
flavors of IOS XE support a custom EAPOL destination address(see link). I
believe there is a feature request in to add a similar feature to IOS-ask
your Cisco AM for more detail.

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/macsec/configuration/xe-3s/macsec-xe-3s-book.html#task_7BBF3B2C5C66466693AFDF9B72BDD381

Regards,
Aaron

On Thu, May 7, 2015 at 3:55 PM, Manu Chao <linux.yahoo at gmail.com> wrote:

> Is following 802.1AE MACsec over Non-MACsec Ethernet Transit supported?
>
> 3750X_SM_MACsec_SW1 <-> MAN Ethernet Provider <-> 3750X_SM_MACsec_SW2
>


More information about the cisco-nsp mailing list