Hi, I need to get in contact with someone in the sales team at Redhat but they are not replying either to my emails or phone calls. Do you know anyone working for Redhat whom we can call? Please dm me. Thanks Eric Sent from my iPhone
On Sep 18, 2020, at 7:48 AM, Wilco Baan Hofman <wilco@baanhofman.nl> wrote:
On 18/09/2020 12:07, Mark Tinka wrote:
There was a time when the use-case for MACSec was to move banks away from running their own DWDM/FC networks, and letting operators do it.
Well, the other use case is access networks with 802.1x. With 802.1x as long as the port stays up the session cookie (whatever is set as authenticated) is the MAC address. So once a port is authenticated, it's really easy to spoof a MAC and still be on the network.
With WPA2 enterprise on WiFi, this problem does not exist, because then there is a cryptographic session. MACsec fixes that gap on wired.
Not all that relevant for long-distance links though :)
-- Wilco