<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#44546A;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><b>MACsec @ MX<o:p></o:p></b></p>
<p class="MsoNormal">Starting with Junos OS Release 15.1, MACsec enables you to secure an Ethernet link for almost all traffic, including frames from the Link Layer Discovery Protocol (LLDP), Link Aggregation Control Protocol (LACP), Dynamic Host Configuration
Protocol (DHCP), Address Resolution Protocol (ARP), and other protocols that are not typically secured on an Ethernet link because of limitations with other security solutions.<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#44546A;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Segoe UI Emoji",sans-serif;color:#44546A;mso-fareast-language:EN-US">😉😉😉😊</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#44546A;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#44546A;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#44546A;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#44546A;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> grnog-request@lists.grnog.gr <grnog-request@lists.grnog.gr>
<b>On Behalf Of </b>Andreas Polyrakis<br>
<b>Sent:</b> 22 October 2018 14:09<br>
<b>To:</b> grnog@lists.grnog.gr; ARIS GEORGAKAS <arisgeorgakas@hotmail.com><br>
<b>Subject:</b> Re: [grnog] MACSec<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Αρη γειά, <br>
<br>
Στο GR-IX δεν κάνουμε macsec. Στο πλαίσιο επικείμενης αναβάθμισης του εξοπλισμού, το έχουμε δει σαν feature (βιβλιογραφικά μόνο). Είναι σίγουρα ενδιαφέρον, θα ήταν χρήσιμο για την προστασία των backbone links του GR-IX, αλλά ο εξοπλισμός που το υποστηρίζει
στο hardware είναι πολύ περιορισμένος.<br>
<br>
Στο ΕΔΕΤ, πέραν του ότι ο εξοπλισμός μας (juniper MX) δεν το υποστηρίζει, τα WAN links είναι πολλά και υλοποιούνται ως lambdas στο DWDM δίκτυό μας. Δεν έχω την παραμικρή ιδέα για το τι υποστηρίζεται σε encryption σε τέτοιο επίπεδο (υποθέτω, τίποτα).<br>
<br>
Ανδρέας<br>
<br>
<br>
On 22/10/18 13:51, ARIS GEORGAKAS wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div id="divtagdefaultwrapper">
<p><span style="font-family:"Calibri",sans-serif">Καλήσπερα σε όλους,<o:p></o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif">Κάνει κάποιος από εσας deploy MACSec στο production και σε πιο use case εκτός του DC και Campus LAN;<o:p></o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif">Δηλ. σε WAN δίκτυα για port based services ή σε shared LAN IX περιβάλλον κτλ. Έχει συζητηθεί αυτό ποτέ στο GRNET?<o:p></o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif">ΜΦΧ<o:p></o:p></span></p>
<p><span style="font-family:"Calibri",sans-serif">Άρης<o:p></o:p></span></p>
</div>
</blockquote>
<p><o:p> </o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>Andreas Polyrakis<o:p></o:p></pre>
<pre>GR-IX Manager // GRNET NOC Technical Manager<o:p></o:p></pre>
<pre>GRNET - Networking Research and Education<o:p></o:p></pre>
<pre>7, Kifisias Av., 115 23, Athens<o:p></o:p></pre>
<pre>t: +30 210 7474249 | c: +30 697 2832 445 | f: +30 210 7474490<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Follow us: <a href="http://www.grnet.gr">www.grnet.gr</a><o:p></o:p></pre>
<pre>Twitter: @grnet_gr | Facebook: @grnet.gr<o:p></o:p></pre>
<pre>LinkedIn: grnet | YouTube: GRNET EDET<o:p></o:p></pre>
</div>
</body>
</html>