RE: FW: [LinkSec] Requirements
Dennis:
> > >Clearly this model needs extending and refining to shared or semi-shared
> > >media, and how that is done depends on the number of possible links. For a
> > >.3ah ONU there is really only one link (to the OLT) so the fact that the
> > >media is (semi) shared doesn't alter the basic procedure at all. Note
> that,
> > >just as with Link Aggregation, A&A needs to run below any 'fixup bridging'
> > >layer which converts the intrinsic point-to-multipoint nature of .3ah to a
> > >shared media (this is not an architectural problem, and has no bearing on
> > >which group should do the work).
> >
> > I agree. In fact, 802.10b SDE had a similar layer placement. SDE is
> below
> > the 802.1D, so it can be used to protect BPDUs.
>
>So what security association would be used in this case and what's its
>scope?
This depends on many things. In the topology that Mick has proposed, the
security association would be between adjacent bridges. Each bridge would
have one security association for each of its neighbors.
Russ