[ipxe-devel] Any plans to include macsec (802.1ae) ?

Oliver Rath rath at mglug.de
Tue Oct 2 12:08:38 UTC 2018


Hi list,

for securing connectivity in layer 2, macsec seems a good (and easy)
way. In linux it is implemented since kernel 4.6 and some (expensive)
NICs are supporting it out of the box (i.e. hpe 10gbit cards with the
x540 processor).

With macsec we could secure also dhcp e.a. traffic and it worksl out of
the box with cheap switches. Im not sure, how complex an implementation
would be, but maybe is worth to do this.

Regards,
Oliver





More information about the ipxe-devel mailing list