Re: [j-nsp] LAN encription

2015-12-15 Thread Mark Tinka
On 15/Dec/15 00:31, james list wrote: > Hi Mike > Beside the cost, are those speed supported by any juniper/arista/what else > device? You might want to look at stuff that Adva are doing, which does encryption at the DWDM layer. Been quite popular with the banks, at 10Gbps, 40Gbps and 100Gbps

Re: [j-nsp] LAN encription

2015-12-14 Thread Damien DeVille
A good place to look for feature support is http://pathfinder.juniper.net/home/ where you can search by product type or by feature (among other things). A search for MACsec for switch to switch connections yeilds the following: http://pathfinder.juniper.net/feature-explorer/feature-info.html?fKey=

Re: [j-nsp] LAN encription

2015-12-14 Thread Kevin Day
My quick notes, since I just went through MACsec research recently: MX: Only supported on MIC-3D-20GE-SFP-E EX9200: Only supported on EX9200-40FE, and only on even numbered ports. Unclear if a license is needed or not. EX4200: Only supported on ports on optional EX-UM-2X4SFP-M module. Requires

Re: [j-nsp] LAN encription

2015-12-14 Thread Jeff McAdams
Last I checked (a month or so ago?) there is only a single MIC (20x1gbps maybe) that can do MacSec on the MX. I think the plan is for future MPCs to support it with any enet MICs connected, but it's not there, yet. I don't know for the full QFX line, but the EX4600s I have supposedly can do lin

Re: [j-nsp] LAN encription

2015-12-14 Thread Michael Gehrmann
Hi James, MACsec isn't done on the MS-MPC to my knowledge it's normally only L3 services. It looks like MACsec is supported but you would have to check for this feature support per line card. Have a look here: http://www.juniper.net/documentation/en_US/junos15.1/topics/concept/macsec-overview-mx-

Re: [j-nsp] LAN encription

2015-12-14 Thread james list
Hi Mike Does ms-mpc support l2 encryption? Indeed I was thinking mac-sec at 40/100gbs... Cheers James Il 14/Dic/2015 23:47, "Michael Gehrmann" ha scritto: > Hi James, > > A Juniper MX, MS-MPC is licensable up to 100Gbps so add the MS-MPC + > License x 2 for cost. > > Cheers > Mike > > On 15 Dec

Re: [j-nsp] LAN encription

2015-12-14 Thread Michael Gehrmann
Hi James, A Juniper MX, MS-MPC is licensable up to 100Gbps so add the MS-MPC + License x 2 for cost. Cheers Mike On 15 December 2015 at 09:31, james list wrote: > Hi Mike > Beside the cost, are those speed supported by any juniper/arista/what else > device? > > Cheers > James > Il 14/Dic/2015

Re: [j-nsp] LAN encription

2015-12-14 Thread james list
Hi Mike Beside the cost, are those speed supported by any juniper/arista/what else device? Cheers James Il 14/Dic/2015 23:24, "Michael Gehrmann" ha scritto: > For those speeds you are better off getting the traffic encrypted by the > end hosts/servers. Pushing encryption to the network will be m

Re: [j-nsp] LAN encription

2015-12-14 Thread Michael Gehrmann
For those speeds you are better off getting the traffic encrypted by the end hosts/servers. Pushing encryption to the network will be more expensive. Mike > On 15 Dec 2015, at 02:15, james list wrote: > > Dear experts, > > a customer of mine is asking for LAN encryption at 40Gbs (with possib

[j-nsp] LAN encription

2015-12-14 Thread james list
Dear experts, a customer of mine is asking for LAN encryption at 40Gbs (with possibility to increase at 100Gbs) for DC interconnection (30 km distance). I’m wondering if QFX is the right device or any other recommendation with Juniper ? I’m also having a look to Arista… any experience also wi