Description:
|
ieee8021SecyMIB MODULE-IDENTITY
LAST-UPDATED "202206060000Z" -- June 6, 2022
ORGANIZATION "IEEE 802.1 Working Group"
CONTACT-INFO
"WG-URL: http://www.ieee802.org/1/
WG-EMail: stds-802-1-l@ieee.org
Contact: IEEE 802.1 Working Group Chair
Postal: C/O IEEE 802.1 Working Group
IEEE Standards Association
445 Hoes Lane
Piscataway, NJ 08854
USA
E-mail: stds-802-1-chairs@ieee.org"
DESCRIPTION
"The MAC security entity (SecY) MIB module. A SecY is a shim in an interface
stack that uses the MAC Security (MACsec) protocol.
Copyright (C) IEEE (2021).
This version of this MIB module is part of IEEE Std 802.1AEdk-2022;
see that standard for full legal notices.
Unless otherwise indicated, the references in this MIB module are to
IEEE Std 802.1AE-2018 as amended by IEEE Std 802.1AE-2018/Cor 1-2020 and
IEEE Std 802.1AEdk-2022.
Each SecY transmits MACsec protected frames on one or more
Secure Channels (SCs) to each of the other SecYs attached to the
same LAN and participating in the same Secure Connectivity
Association (CA). The CA is a security relationship, that is
established and maintained by key agreement protocols and supported
by MACsec to provide full connectivity between its participants.
Each SC provides unidirectional point to multipoint connectivity
from one participant to all the others and is supported by a
succession of similarly point to multipoint Secure Associations
(SAs). The Secure Association Key (SAK) used to protect frames is
changed as an SA is replaced by its (overlapping) successor so
fresh keys can be used without disrupting a long lived SC and CA.
Two different upper interfaces, a Controlled Port (for frames
protected by MACsec, providing an instance of the secure MAC
service) and an Uncontrolled Port (for frames not requiring
protection, like the key agreement frames used to establish the
CA and distribute keys) are associated with a SecY shim. For each
instance of a SecY two ifTable rows (one for each interface) run on
top of an ifTable row representing the 'Common Port' interface,
such as a row with ifType ='ethernetCsmacd(6)'.
___________________________________________________________________
| | |
| Controlled Port Interface | Uncontrolled Port Interface |
| (ifEntry = j,ifType = | (ifEntry = k, ifType = |
| macSecControlledIF(231)) | macSecUncontrolledIF(232)) |
|________________________________________________________________|
| |
| Physical Interface |
| (ifEntry = i) |
| (ifType = ethernetCsmacd(6)) |
|________________________________________________________________|
Example MACsec Interface Stack. i, j, k are ifIndexes each
indicating a row in the ifTable."
REVISION "202206060000Z" -- June 6, 2022
DESCRIPTION
"Published as part of IEEE Std 802.1AEdk-2022.
Cross references, contact information, and descriptions updated."
REVISION "201712071816Z"
DESCRIPTION
"Published as part of IEEE Std 802.1AE-2018.
Updated CONTACT-INFO."
REVISION "201605102049Z"
DESCRIPTION
"Updated by the IEEE Std 802.1AEcg amendment. Object DESCRIPTIONs
and references aligned with text of the standard (including prior
amendments). IEEE 802.1AEcg Annex G details changes.
The initial version of this ieee8021SecyMIB used the object
name prefix 'secy' rather than 'ieee8021secy' (recommended by
RFC 4181). The 'secy' prefix has been retained in this revision for
for backwards compatibility and internal consistency."
REVISION "200601100000Z"
DESCRIPTION
"Initial version of this MIB in IEEE 802.1AE-2006"
|
|
iso(1)
secyMIBNotifications(0)
