Messages in this thread | | | Date | Wed, 23 Feb 2022 08:20:24 -0800 | From | Jakub Kicinski <> | Subject | Re: [PATCH net-next v4 0/5] Add support for locked bridge ports (for 802.1X) |
| |
On Wed, 23 Feb 2022 09:40:59 +0100 Hans Schultz wrote: > > You still haven't answer my question. Is the data plane clear text in > > the deployment you describe? > > Sorry, I didn't understand your question in the first instance. So as > 802.1X is only about authentication/authorization, the port when opened > for a host is like any other switch port and thus communication is in > the clear.
Alright, thanks for clarifying!
> I have not looked much into macsec (but know ipsec), and that is a > crypto (key) based connection mechanism, but that is a totally different > ballgame, and I think it would for most practical cases require hardware > encryption.
| |