Questions tagged [macsec]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
34 views

How to route traffic from physical to virtual interfaces when using MACsec?

The setup: 3 Linux Ubuntu 18.04 virtualized in GNS3 all connected to a Ethernet hub, lets call them VM1, VM2 and VM3, each VM has a physical interface called ens3 and a IP Address from DHCP Server ...
0 votes
0 answers
57 views

How can I change the cipher suite on wpa_supplicant

I started to use wpa_supplicant to configure a MacSec connection with another computer, the problem is that there are several options that I do not find in the template of wpa_supplicant. https://w1....
0 votes
1 answer
264 views

Why MACsec can not reach more than 2Gbits/s?

i am configuring macsec and i have discovered that, when using this protocol to send/received data, the bitrate is so low. I am using it over a 10Gb network adaptor, using iperf3 it almost reach that ...
3 votes
0 answers
1k views

macsec interface using wpa_supplicant ( 802.1X-2010 )

I have created a wpa_supplicant.conf file for macsec. I'd like to use the the Macsec Key Agreement protocol to establish the session keys and create a secure channel. I have the following ...
1 vote
0 answers
500 views

How to configure MACSEC Key Agreement (MKA) with hostapd & wpasupplicant?

I'm trying to setup MKA between some clients (using wpa_supplicant) and an authenticator (using hostapd). Additionally I have a RADIUS server(using FreeRADIUS) that is going to be handling the ...
1 vote
1 answer
861 views

MACSec in virtual Ethernet adapters

Can I use MACSec in the virtual Ethernet adapters(containers or VMs) without configuring it in the physical MAC address? There were multiple examples of MACSec implementation in VMs in the internet ...
3 votes
2 answers
3k views

Can a switch that doesnt know anything about 802.1ae macsec route macsec frames?

If one device (e.g. A wireless router) is attempting to communicate with another device (e.g. some gateway to another network) through a unmanaged switch and the router is ciphering frames it ...
12 votes
2 answers
3k views

Encryption over gigabit carrier ethernet

My conclusion to this was to pipe VLAN trunks through EoIP tunnels and encapsulate those in hardware assisted IPSec. Two pairs of fairly inexpensive Mikrotik RB1100AHx2 routers proved capable of ...
-1 votes
1 answer
1k views

MACSec encryption over PBN?

This came up in a more generic link layer encryption question: Commodity switches with MACSec hardware offers wirespeed AES-GCM encryption at a fraction of the cost typically associated with layer 2 ...
1 vote
1 answer
862 views

Switch to switch encryption over a wireless bridge (TrustSec?)

I am planning to connect an existing Cisco 3750 switch to a 3560C switch over a wireless PTP bridge. The bridge will be WPA2 protected, but I am looking for an additional measure of security between ...