Mixing
Run MACsec and VLAN in parallel?
Clash Royale CLAN TAG#URR8PPP
up vote
4
down vote
favorite
MACsec (IEEE 802.1ae) adds a security tag to an Ethernet frame and encrypts the IEEE 802.1Q field, the EtherType and the payload field.
If you want to use VLAN, you need the 802.1Q field to announce the VLAN ID. The EtherType is usually set to 0x8100.
However, both MACsec and VLAN use an unique EtherType. As far as I undertand, the security tag introduced by MACsec uses an own EtherType. Is it possible to use MACsec and VLAN in parallel?
ethernet security mac
asked 3 hours ago
null
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
4
down vote
favorite
MACsec (IEEE 802.1ae) adds a security tag to an Ethernet frame and encrypts the IEEE 802.1Q field, the EtherType and the payload field.
If you want to use VLAN, you need the 802.1Q field to announce the VLAN ID. The EtherType is usually set to 0x8100.
However, both MACsec and VLAN use an unique EtherType. As far as I undertand, the security tag introduced by MACsec uses an own EtherType. Is it possible to use MACsec and VLAN in parallel?
ethernet security mac
asked 3 hours ago
null
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
4
down vote
favorite
up vote
4
down vote
favorite
MACsec (IEEE 802.1ae) adds a security tag to an Ethernet frame and encrypts the IEEE 802.1Q field, the EtherType and the payload field.
If you want to use VLAN, you need the 802.1Q field to announce the VLAN ID. The EtherType is usually set to 0x8100.
However, both MACsec and VLAN use an unique EtherType. As far as I undertand, the security tag introduced by MACsec uses an own EtherType. Is it possible to use MACsec and VLAN in parallel?
ethernet security mac
asked 3 hours ago
null
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
MACsec (IEEE 802.1ae) adds a security tag to an Ethernet frame and encrypts the IEEE 802.1Q field, the EtherType and the payload field.
If you want to use VLAN, you need the 802.1Q field to announce the VLAN ID. The EtherType is usually set to 0x8100.
However, both MACsec and VLAN use an unique EtherType. As far as I undertand, the security tag introduced by MACsec uses an own EtherType. Is it possible to use MACsec and VLAN in parallel?
ethernet security mac
ethernet security mac
asked 3 hours ago
null
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
null
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
null
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
null
1212
asked 3 hours ago
null
1212
1212
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
null is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
3
down vote
Welcome to Network Engineering! There is no standard for MACSec and 802.1Q, so manufacturers have come up with their own solutions. Cisco calls it "WAN MACSec," and does it this way:
The WAN MACsec offering is standards based but offers additional
capabilities not found in earlier MACsec capabilities. More
specifically, MACsec can be leveraged by enterprise customers over
public carrier Ethernet offerings, allowing customers to adapt to the
public carrier Ethernet service offering and capabilities (or
restrictions).
New enhancements for WAN MACsec include:
802.1Q Tag in the Clear
Standard IEEE 802.1X-rev MACsec Key Agreement
Integrated MACsec authentication adaptability over public Carrier Ethernet transport
802.1Q Tag in the Clear
This enhancement offers the ability to expose the 802.1Q tag outside
the encrypted MACsec header. Exposing this field offers a multitude of
design options with MACsec, and in some cases of public Carrier
Ethernet transport providers, is necessary for leveraging certain
transport services (see use case section).
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-paper-c11-737544.html
answered 3 hours ago
Ron Trunk
32.7k22869
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
3
down vote
Welcome to Network Engineering! There is no standard for MACSec and 802.1Q, so manufacturers have come up with their own solutions. Cisco calls it "WAN MACSec," and does it this way:
The WAN MACsec offering is standards based but offers additional
capabilities not found in earlier MACsec capabilities. More
specifically, MACsec can be leveraged by enterprise customers over
public carrier Ethernet offerings, allowing customers to adapt to the
public carrier Ethernet service offering and capabilities (or
restrictions).
New enhancements for WAN MACsec include:
802.1Q Tag in the Clear
Standard IEEE 802.1X-rev MACsec Key Agreement
Integrated MACsec authentication adaptability over public Carrier Ethernet transport
802.1Q Tag in the Clear
This enhancement offers the ability to expose the 802.1Q tag outside
the encrypted MACsec header. Exposing this field offers a multitude of
design options with MACsec, and in some cases of public Carrier
Ethernet transport providers, is necessary for leveraging certain
transport services (see use case section).
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-paper-c11-737544.html
answered 3 hours ago
Ron Trunk
32.7k22869
add a comment |Â
up vote
3
down vote
Welcome to Network Engineering! There is no standard for MACSec and 802.1Q, so manufacturers have come up with their own solutions. Cisco calls it "WAN MACSec," and does it this way:
The WAN MACsec offering is standards based but offers additional
capabilities not found in earlier MACsec capabilities. More
specifically, MACsec can be leveraged by enterprise customers over
public carrier Ethernet offerings, allowing customers to adapt to the
public carrier Ethernet service offering and capabilities (or
restrictions).
New enhancements for WAN MACsec include:
802.1Q Tag in the Clear
Standard IEEE 802.1X-rev MACsec Key Agreement
Integrated MACsec authentication adaptability over public Carrier Ethernet transport
802.1Q Tag in the Clear
This enhancement offers the ability to expose the 802.1Q tag outside
the encrypted MACsec header. Exposing this field offers a multitude of
design options with MACsec, and in some cases of public Carrier
Ethernet transport providers, is necessary for leveraging certain
transport services (see use case section).
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-paper-c11-737544.html
answered 3 hours ago
Ron Trunk
32.7k22869
add a comment |Â
up vote
3
down vote
up vote
3
down vote
Welcome to Network Engineering! There is no standard for MACSec and 802.1Q, so manufacturers have come up with their own solutions. Cisco calls it "WAN MACSec," and does it this way:
The WAN MACsec offering is standards based but offers additional
capabilities not found in earlier MACsec capabilities. More
specifically, MACsec can be leveraged by enterprise customers over
public carrier Ethernet offerings, allowing customers to adapt to the
public carrier Ethernet service offering and capabilities (or
restrictions).
New enhancements for WAN MACsec include:
802.1Q Tag in the Clear
Standard IEEE 802.1X-rev MACsec Key Agreement
Integrated MACsec authentication adaptability over public Carrier Ethernet transport
802.1Q Tag in the Clear
This enhancement offers the ability to expose the 802.1Q tag outside
the encrypted MACsec header. Exposing this field offers a multitude of
design options with MACsec, and in some cases of public Carrier
Ethernet transport providers, is necessary for leveraging certain
transport services (see use case section).
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-paper-c11-737544.html
answered 3 hours ago
Ron Trunk
32.7k22869
Welcome to Network Engineering! There is no standard for MACSec and 802.1Q, so manufacturers have come up with their own solutions. Cisco calls it "WAN MACSec," and does it this way:
The WAN MACsec offering is standards based but offers additional
capabilities not found in earlier MACsec capabilities. More
specifically, MACsec can be leveraged by enterprise customers over
public carrier Ethernet offerings, allowing customers to adapt to the
public carrier Ethernet service offering and capabilities (or
restrictions).
New enhancements for WAN MACsec include:
802.1Q Tag in the Clear
Standard IEEE 802.1X-rev MACsec Key Agreement
Integrated MACsec authentication adaptability over public Carrier Ethernet transport
802.1Q Tag in the Clear
This enhancement offers the ability to expose the 802.1Q tag outside
the encrypted MACsec header. Exposing this field offers a multitude of
design options with MACsec, and in some cases of public Carrier
Ethernet transport providers, is necessary for leveraging certain
transport services (see use case section).
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-paper-c11-737544.html
answered 3 hours ago
Ron Trunk
32.7k22869
answered 3 hours ago
Ron Trunk
32.7k22869
answered 3 hours ago
Ron Trunk
32.7k22869
answered 3 hours ago
Ron Trunk
32.7k22869
32.7k22869
add a comment |Â
add a comment |Â
null is a new contributor. Be nice, and check out our Code of Conduct.
null is a new contributor. Be nice, and check out our Code of Conduct.
null is a new contributor. Be nice, and check out our Code of Conduct.
null is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f54547%2frun-macsec-and-vlan-in-parallel%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
