802.1Xbx - Port-Based Network Access Control Amendment 1: MAC Security Key Agreement protocol (MKA) extensions
This standard adds MACsec (Media Access Control security) Key Agreement protocol (MKA) data elements and procedures that provide additional security and manageability capabilities, including the ability to maintain secure communication while the operation of MKA is suspended, when used in conjunction with MACsec Cipher Suites that support Extended Packet Numbering.
This project will extend MKA to realize additional security and manageability capabilities made possible by the P802.1AEbw amendment that adds extended packet numbering Cipher Suites to IEEE Std 802.1AE- 2006. These additional capabilities will include MKA data elements and procedures that allow secure connectivity association (CA) members to temporarily suspend MKA operation without causing protocol timeouts that would disrupt secure data transfer, thus allowing in-service control plane software upgrades.
MKA already allows secure data transfer to continue without disruption as fresh keys are distributed and reauthentication and authorization takes place, potentially allowing any secured link or LAN to provide continuous connectivity for many years. One environmental factor likely to limit the longevity of this uninterrupted communication is the need to perform a control plane software upgrade. This fact has been recognized in the design of other networking protocols that include explicit support for continuing operation and state recovery when monitoring protocol actions need to be suspended and resumed. This project will allow such in-service upgrade capability when communication is being protected by 802.1AE MACsec in conjunction with 802.1X. The IEEE Std 802.1AEbw extended packet numbering amendment will ensure that the interval between the need for fresh keys (even in very high speed operation) is greater than the time required for control plane upgrades, and this project is needed to realize the potential benefit.
| Status | PAR approved May 15th, 2012; Standard approved Dec 10th, 2014. |
| Editor | Mick Seaman |
| Date | Document |
|---|
Pages copyright © Institute of Electrical and Electronics Engineers, Inc. Please read the rules on Confidentiality Statements and Copyright Notices on Communications. Information on Privacy and opting out of cookies is available. If you have any comments on these pages, please send them to me.
