Re: Security over SONET/SDH

--- william.allen.simpson@gmail.com wrote: From: William Allen Simpson <william.allen.simpson@gmail.com> What security protocols are folks using to protect SONET/SDH? At what speeds? ------------------------------------------------------ By security protocol do you mean encrypting the traffic? Like what a Fastlane does? http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/GD... scott

On 6/23/13 12:48 AM, Scott Weeks wrote:
By security protocol do you mean encrypting the traffic? Like what a Fastlane does?
http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/GD...
That's rather a surprising choice (ATM product) for an IP network. Please describe what backbone you are running that uses a FASTLANE? Hopefully, other folks are securing their PPP or ethernet packets?

On Sun, Jun 23, 2013 at 9:47 AM, William Allen Simpson <william.allen.simpson@gmail.com> wrote:
On 6/23/13 12:48 AM, Scott Weeks wrote:
By security protocol do you mean encrypting the traffic? Like what a Fastlane does?
http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/GD...
That's rather a surprising choice (ATM product) for an IP network. Please describe what backbone you are running that uses a FASTLANE?
I'd be surprised if a civilian org could buy a fastlane device,.. maybe they moved out of the gov't only world though since the last time I saw one? It does claim to do oc-48 rate sonet though.
Hopefully, other folks are securing their PPP or ethernet packets?

On Sun, Jun 23, 2013 at 10:54 AM, Christopher Morrow <morrowc.lists@gmail.com> wrote:
On Sun, Jun 23, 2013 at 9:47 AM, William Allen Simpson <william.allen.simpson@gmail.com> wrote:
On 6/23/13 12:48 AM, Scott Weeks wrote:
By security protocol do you mean encrypting the traffic? Like what a Fastlane does?
http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/GD...
That's rather a surprising choice (ATM product) for an IP network. Please describe what backbone you are running that uses a FASTLANE?
I'd be surprised if a civilian org could buy a fastlane device,.. maybe they moved out of the gov't only world though since the last time I saw one? It does claim to do oc-48 rate sonet though.
http://www.gdc4s.com/kg-530.html claims 40gbps... I don't know that a purely civilian org can purchase these though, nor the kg-75, despite these being on the GD site.
Hopefully, other folks are securing their PPP or ethernet packets?

On 6/23/13 10:57 AM, Christopher Morrow wrote:
On Sun, Jun 23, 2013 at 10:54 AM, Christopher Morrow <morrowc.lists@gmail.com> wrote:
On Sun, Jun 23, 2013 at 9:47 AM, William Allen Simpson <william.allen.simpson@gmail.com> wrote:
On 6/23/13 12:48 AM, Scott Weeks wrote:
http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/GD...
That's rather a surprising choice (ATM product) for an IP network. Please describe what backbone you are running that uses a FASTLANE?
I'd be surprised if a civilian org could buy a fastlane device,.. maybe they moved out of the gov't only world though since the last time I saw one? It does claim to do oc-48 rate sonet though.
http://www.gdc4s.com/kg-530.html
claims 40gbps... I don't know that a purely civilian org can purchase these though, nor the kg-75, despite these being on the GD site.
And at $189,950 MSRP, obviously every ISP is dashing out the door for a pair for each and every long haul fiber link. ;-) Hard to see the IETF multi-vendor interoperability specifications. It does mention SNMPv3, unlike all their other products which use a proprietary management scheme. Also HTTP, although no mention of its purpose. At least the FASTLANE mentioned above specifies FIREFLY -- the mere rumor of which was our basis for naming Photuris [RFC2522].
Hopefully, other folks are securing their PPP or ethernet packets?
But I don't see where you mention that Google is actually using these to secure your fiber?

On Sun, 23 Jun 2013 17:03:49 -0400, William Allen Simpson said:
Hard to see the IETF multi-vendor interoperability specifications. It does mention SNMPv3, unlike all their other products which use a proprietary management scheme. Also HTTP,
Not HTTPS? :)

On Sun, Jun 23, 2013 at 5:03 PM, William Allen Simpson <william.allen.simpson@gmail.com> wrote:
And at $189,950 MSRP, obviously every ISP is dashing out the door for a pair for each and every long haul fiber link. ;-)
cheaper by the dozen?
participants (4)
-
Christopher Morrow
-
Scott Weeks
-
Valdis.Kletnieks@vt.edu
-
William Allen Simpson