03-30-2020 04:16 AM
Could you please someone help regarding below query.
1. Is MACSEC supported at full line rate on the 100GB interfaces?
2. Is there any issues with VXLAN EVPN being carried over MACSEC.
03-30-2020 05:31 AM
Hi,
According to release notes, encryption is being done at line rate:
Provides line rate encryption capabilities.
Also, there should not be any issues for vxlan over macsec enabled interfaces.
Cheers,
Sergiu
03-30-2020 05:55 AM
Thank you Sergiu for your quick help.
But I am unable find exact details through url. If you copy paste related information here, It will be great help.
03-30-2020 11:33 PM
Hi,
The section I was referring to:
Media Access Control Security (MACsec) an IEEE 802.1AE along with MACsec Key Agreement (MKA) protocol provide secure communications on Ethernet links. It offers the following :
Here is another document where it is mentioned:
The 6 uplink ports can be configured as 40 and 100-Gbps Ethernet or FCoE ports, offering flexible migration options. The switch has IEEE compliant, FC-FEC and RS-FEC enabled for 25-Gbps support. All ports support wire-rate MACsec encryption[2]. Please see the Licensing guide section to enable features on the platform.
Regards,
Sergiu
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide