As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [macsec]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
200 views

How to configure MACSEC Key Agreement (MKA) with hostapd & wpasupplicant?

I'm trying to setup MKA between some clients (using wpa_supplicant) and an authenticator (using hostapd). Additionally I have a RADIUS server(using FreeRADIUS) that is going to be handling the ...
A. Trevelyan's user avatar
3 votes
0 answers
1k views

macsec interface using wpa_supplicant ( 802.1X-2010 )

I have created a wpa_supplicant.conf file for macsec. I'd like to use the the Macsec Key Agreement protocol to establish the session keys and create a secure channel. I have the following ...
hoffmeister's user avatar
1 vote
1 answer
575 views

MACSec in virtual Ethernet adapters

Can I use MACSec in the virtual Ethernet adapters(containers or VMs) without configuring it in the physical MAC address? There were multiple examples of MACSec implementation in VMs in the internet ...
Lucid lynx's user avatar
3 votes
2 answers
2k views

Can a switch that doesnt know anything about 802.1ae macsec route macsec frames?

If one device (e.g. A wireless router) is attempting to communicate with another device (e.g. some gateway to another network) through a unmanaged switch and the router is ciphering frames it ...
Bob's user avatar
  • 130
1 vote
1 answer
793 views

Switch to switch encryption over a wireless bridge (TrustSec?)

I am planning to connect an existing Cisco 3750 switch to a 3560C switch over a wireless PTP bridge. The bridge will be WPA2 protected, but I am looking for an additional measure of security between ...
metatheorem's user avatar
-1 votes
1 answer
1k views

MACSec encryption over PBN?

This came up in a more generic link layer encryption question: Commodity switches with MACSec hardware offers wirespeed AES-GCM encryption at a fraction of the cost typically associated with layer 2 ...
Roy's user avatar
  • 4,356
12 votes
2 answers
3k views

Encryption over gigabit carrier ethernet

My conclusion to this was to pipe VLAN trunks through EoIP tunnels and encapsulate those in hardware assisted IPSec. Two pairs of fairly inexpensive Mikrotik RB1100AHx2 routers proved capable of ...
Roy's user avatar
  • 4,356