Re: [Anima] key management for MACsec

Richardson [mailto:mcr+i...@sandelman.ca] Sent: Monday, March 27, 2017 3:39 PM To: Hesham ElBakoury Cc: anima@ietf.org Subject: Re: [Anima] key management for MACsec Hesham ElBakoury <hesham.elbako...@huawei.com> wrote: > 802.1AE (MACsec) key management is specified in 802.1X-rev2 (2010).

Re: [Anima] key management for MACsec

Hesham ElBakoury wrote: > 802.1AE (MACsec) key management is specified in 802.1X-rev2 (2010). yes, I've come to understand that it's there. mcr> but, I see that it's really an amendment to 802.1X, which I am fetching mcr> now. a) does it support stock

Re: [Anima] key management for MACsec

Mike, 802.1AE (MACsec) key management is specified in 802.1X-rev2 (2010). Hesham -Original Message- From: Anima [mailto:anima-boun...@ietf.org] On Behalf Of Michael Richardson Sent: Monday, March 27, 2017 12:32 PM To: anima@ietf.org Subject: [Anima] key management for MACsec Reading

[Anima] key management for MACsec

Reading 802.1AE-2006, I did not see any key management protocol for MACsec. I was thinking before that maybe we could write a MACsec key agreement mechanism in IKEv2. I am now informed of 802.1Xbx-2014: Amendment 1: MAC Security Key Agreement Protocol (MKA) Extensions but, I see that it's