07-23-2012 09:40 AM - edited 03-07-2019 07:55 AM
Hello,
I came across this post regarding encryption and had some questions: https://supportforums.cisco.com/message/3686207#3686207
We may be required, by federal regulations, to encrypt traffic between a few of our buildings. I do not believe we have the X-series switches, but have the following models which the encryption would need to take place:
Model: WS-C3560-48PS
IOS: 12.2(55)SE1 (IPBASEK9)
Model: WS-C3750-48P
IOS: 12.2(55)SE1 (IPBASEK9)
Currently, we have MM fiber connection the two switches listed above. Are these devices capable of any encryption between them? What about add-on SFP modules, etc?
Rory Schmitz
Solved! Go to Solution.
07-23-2012 09:48 AM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Don't believe 3560/3750 support any device-to-device encryption (beyond SSH to the device itself).
07-23-2012 03:38 PM
If you are talking about MAC-SEC then only the "X", like 3560X and the 3750X, will support MAC-SEC encryption and you need an optional service module, the C3KX-SM-10G.
07-23-2012 09:48 AM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Don't believe 3560/3750 support any device-to-device encryption (beyond SSH to the device itself).
07-23-2012 10:52 AM
Thank you for the reply. I'll leave it open for the rest of the day in case anyone else has any information. In the meantime, does there happen to be a list of switch products that do support encryption that might fit our scenario?
Rory Schmitz
*EDIT* The encryption type we would be required to have would be NIST. I'm new to NIST so I'm not sure if there would be more information required for me to give to anyone.
Message was edited by: Rory Schmitz
07-23-2012 03:38 PM
If you are talking about MAC-SEC then only the "X", like 3560X and the 3750X, will support MAC-SEC encryption and you need an optional service module, the C3KX-SM-10G.
07-24-2012 05:52 AM
Thank you both.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide