Re: [c-nsp] Transparent WAN Encryption

2014-02-19 Thread Justin M. Streiner
On Sun, 2 Feb 2014, Jeff Orr wrote: If you are using a private MPLS (I.e. Not over Internet) have Cisco CE routers consider GETVPN. For the reasons you mentioned, we as a customer went this direction. We needed to ensure our WAN (150 sites/multiple data centers)traveling across a variety of

Re: [c-nsp] Transparent WAN Encryption

2014-02-03 Thread Ian Henderson
On 4 Feb 2014, at 10:30 am, Benny Amorsen benny+use...@amorsen.dk wrote: Does that actually work over WAN links that are not just plain optical paths? I have been wondering if you can get MacSec to work over EoMPLS. It ‘just worked’ in the lab over EoMPLS, but I haven’t experienced it in

Re: [c-nsp] Transparent WAN Encryption

2014-02-03 Thread Benny Amorsen
Ian Henderson i...@ianh.net.au writes: What about MacSec? Works between 3560X/4500/4500X/Sup2T/etc for wire rate L2 encryption. http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/15.1/XE_330SG/configuration/guide/swmacsec.html#wp1334072 says: Does that actually work over WAN links

Re: [c-nsp] Transparent WAN Encryption

2014-02-03 Thread Frank Bulk
that handles those two Ethertypes, MACsec should run fine. Regards, Frank -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Benny Amorsen Sent: Monday, February 03, 2014 5:31 PM To: Ian Henderson Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Transparent

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread Eugeniu Patrascu
On Sun, Feb 2, 2014 at 4:16 AM, Antonio Soares amsoa...@netcabo.pt wrote: Hello group, Service Provider WAN links are not secure anymore and I have more and more enterprise customer asking transparent WAN encryption solutions. I came across these two products: EncryptTight:

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread Jeff Orr
If you are using a private MPLS (I.e. Not over Internet) have Cisco CE routers consider GETVPN. For the reasons you mentioned, we as a customer went this direction. We needed to ensure our WAN (150 sites/multiple data centers)traveling across a variety of links/providers including

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread Tarko Tikan
hey, If you are using a private MPLS (I.e. Not over Internet) have Cisco CE routers consider GETVPN. There is no reason why you can't use GETVPN inside L3VPN. This is exactly one use case for GETVPN and many people are using it successfully. If you don't trust your provider at all,

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread Antonio Soares
2014 17:25 To: Antonio Soares Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Transparent WAN Encryption If you are using a private MPLS (I.e. Not over Internet) have Cisco CE routers consider GETVPN. For the reasons you mentioned, we as a customer went this direction. We needed to ensure our

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread Antonio Soares
...@netcabo.pt amsoa...@netcabo.pt http://www.ccie18473.net/ http://www.ccie18473.net From: Eugeniu Patrascu [mailto:eu...@imacandi.net] Sent: domingo, 2 de Fevereiro de 2014 12:47 To: Antonio Soares Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Transparent WAN Encryption On Sun, Feb 2

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread cnsp
) amsoa...@netcabo.pt http://www.ccie18473.net -Original Message- From: Jeff Orr [mailto:j...@communicorr.com] Sent: domingo, 2 de Fevereiro de 2014 17:25 To: Antonio Soares Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Transparent WAN Encryption If you are using

Re: [c-nsp] Transparent WAN Encryption

2014-02-02 Thread Ian Henderson
On 3 Feb 2014, at 8:10 am, Antonio Soares amsoa...@netcabo.pt wrote: I'm looking for the simplest way to do it. Most customers have L2 connections between Data Centers. The edge device controlled by the customer is a Layer 2 Switch. The mechanisms like IPSec, GETVPN, FlexVPN, an so on, need a

[c-nsp] Transparent WAN Encryption

2014-02-01 Thread Antonio Soares
Hello group, Service Provider WAN links are not secure anymore and I have more and more enterprise customer asking transparent WAN encryption solutions. I came across these two products: EncryptTight: http://www.blackbox.com/Store/Results.aspx/Networking/Security-Optimization/