DokuWiki

Diese Seite ist nicht editierbar. Sie können den Quelltext sehen, jedoch nicht verändern. Kontaktieren Sie den Administrator, wenn Sie glauben, dass hier ein Fehler vorliegt.
====== MACsec (IEEE 802.1AE) mit OmniSwitch (und MikroTik) ======

<WRAP center round tip 60%>
Für die Verwendung von MACsec benötigt man auf dem OmniSwitch die OS-SW-MACSEC Lizenz. Diese Lizenz ist für 0 $/€ gelistet und ist eine Site-License (alle OmniSwitches des Endkunden können die gleiche Lizenz verwenden).
</WRAP>

<code>
-> show license-info 
                                             Time (Days)       Upgrade      Expiration  
VC   device   License            Type        Remaining         Status       Date        
----+------+---------------+---------------+---------------+--------------+----------------
1       0    Advanced           PERM           NA             NA             NA              
1       0    MACSEC             PERM           NA             NA             NA             
</code>

====== MACsec-Verbindung von OmniSwitch 6465T-P12 zu OmniSwitch 6465T-P12 ======

===== Testaufbau =====

<WRAP center round alert 60%>
Bild folgt!
</WRAP>

===== Konfiguration OmniSwitch =====

<WRAP center round tip 60%>
Beide OmniSwitch 6465T-P12 verwenden die gleiche Konfiguration!
</WRAP>

<code>
! Security:
security key 1 algorithm aes-cmac-128 encrypt-key 55e534f7603def330c4e878136a373d4 keyed-name 0x0000000000000000000000000000000000000000000000000000000000000001
security key-chain 1 name "MACsec OmniSwitch"
security key-chain 1 key 1

! MAC Security:
interfaces port 1/1/9 macsec mode dynamic key-chain 1 server-priority 10 transmit-interval 3 encryption
interfaces port 1/1/9 macsec admin-state enable
</code>

===== Datendurchsatz mit MACsec =====

<WRAP center round tip 60%>
Der Datendurchsatz liegt hier im Rahmen einer „wire-rate“ 1 Gbps Verbindung (unter Berücksichtigung des zusätzlichen MACsec Headers). Die Ver- und Entschlüsselung von AES-128 wird in Hardware im PHY-Chip des OS6465T-P12 abgebildet.
</WRAP>

<WRAP center round info 60%>
Der Datendurchsatz ohne MACsec Header/Verschlüsselung liegt in diesem Testaufbau bei 940 Mbps.
</WRAP>

<code>
Accepted connection from 192.168.2.19, port 51674
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 51675
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec   109 MBytes   914 Mbits/sec
[  5]   1.00-2.00   sec   109 MBytes   916 Mbits/sec
[  5]   2.00-3.00   sec   109 MBytes   917 Mbits/sec
[  5]   3.00-4.00   sec   109 MBytes   918 Mbits/sec
[  5]   4.00-5.00   sec   109 MBytes   917 Mbits/sec
[  5]   5.00-6.00   sec   109 MBytes   915 Mbits/sec
[  5]   6.00-7.00   sec   109 MBytes   911 Mbits/sec
[  5]   7.00-8.00   sec   109 MBytes   914 Mbits/sec
[  5]   8.00-9.00   sec   109 MBytes   915 Mbits/sec
[  5]   9.00-10.00  sec   109 MBytes   916 Mbits/sec
[  5]  10.00-10.00  sec  46.7 KBytes   621 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec  1.07 GBytes   915 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 51678
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 51679
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec   109 MBytes   916 Mbits/sec
[  5]   1.00-2.00   sec   109 MBytes   918 Mbits/sec
[  5]   2.00-3.00   sec   109 MBytes   913 Mbits/sec
[  5]   3.00-4.00   sec   110 MBytes   919 Mbits/sec
[  5]   4.00-5.00   sec   109 MBytes   915 Mbits/sec
[  5]   5.00-6.00   sec   109 MBytes   916 Mbits/sec
[  5]   6.00-7.00   sec   109 MBytes   917 Mbits/sec
[  5]   7.00-8.00   sec   109 MBytes   918 Mbits/sec
[  5]   8.00-9.00   sec   109 MBytes   916 Mbits/sec
[  5]   9.00-10.00  sec   109 MBytes   917 Mbits/sec
[  5]  10.00-10.00  sec  8.48 KBytes  88.7 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec  1.07 GBytes   916 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 51686
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 51687
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec   108 MBytes   907 Mbits/sec
[  5]   1.00-2.00   sec   109 MBytes   916 Mbits/sec
[  5]   2.00-3.00   sec   109 MBytes   916 Mbits/sec
[  5]   3.00-4.00   sec   109 MBytes   912 Mbits/sec
[  5]   4.00-5.00   sec   109 MBytes   914 Mbits/sec
[  5]   5.00-6.00   sec   109 MBytes   916 Mbits/sec
[  5]   6.00-7.00   sec   109 MBytes   918 Mbits/sec
[  5]   7.00-8.00   sec   109 MBytes   914 Mbits/sec
[  5]   8.00-9.00   sec   108 MBytes   904 Mbits/sec
[  5]   9.00-10.00  sec   109 MBytes   915 Mbits/sec
[  5]  10.00-10.00  sec  42.4 KBytes   457 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec  1.06 GBytes   913 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 51789
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 51790
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec   105 MBytes   877 Mbits/sec
[  5]   1.00-2.00   sec   109 MBytes   914 Mbits/sec
[  5]   2.00-3.00   sec   109 MBytes   915 Mbits/sec
[  5]   3.00-4.00   sec   109 MBytes   913 Mbits/sec
[  5]   4.00-5.00   sec   109 MBytes   914 Mbits/sec
[  5]   5.00-6.00   sec   109 MBytes   914 Mbits/sec
[  5]   6.00-7.00   sec   109 MBytes   913 Mbits/sec
[  5]   7.00-8.00   sec   109 MBytes   914 Mbits/sec
[  5]   8.00-9.00   sec   109 MBytes   914 Mbits/sec
[  5]   9.00-10.00  sec   109 MBytes   912 Mbits/sec
[  5]  10.00-10.00  sec   113 KBytes   882 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec  1.06 GBytes   910 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 51796
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 51797
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec   109 MBytes   911 Mbits/sec
[  5]   1.00-2.00   sec   109 MBytes   915 Mbits/sec
[  5]   2.00-3.00   sec   109 MBytes   916 Mbits/sec
[  5]   3.00-4.00   sec   109 MBytes   914 Mbits/sec
[  5]   4.00-5.00   sec   109 MBytes   915 Mbits/sec
[  5]   5.00-6.00   sec   109 MBytes   914 Mbits/sec
[  5]   6.00-7.00   sec   109 MBytes   913 Mbits/sec
[  5]   7.00-8.00   sec   109 MBytes   917 Mbits/sec
[  5]   8.00-9.00   sec   109 MBytes   915 Mbits/sec
[  5]   9.00-10.00  sec   109 MBytes   914 Mbits/sec
[  5]  10.00-10.00  sec   202 KBytes   822 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec  1.06 GBytes   914 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
</code>

====== MACsec-Verbindung von OmniSwitch 6465T-P12 zu Mikrotik hAP ax² ======

===== Testaufbau =====

<WRAP center round alert 60%>
Bild folgt!
</WRAP>

===== Konfiguration OmniSwitch =====
<code>
security key-chain 3 name "MikroTik MACsec"
security key 3 algorithm aes-cmac-128 hex-key 0xf0c20e75ca03c351227f314a5c15683e keyed-name 0x58db407c3ae45b719f395a15ee3934506b765235445dffa07c61bf985cf2e376
security key-chain 3 key 3

interfaces port 1/1/10 macsec mode dynamic key-chain 3 server-priority 10 transmit-interval 3 encryption
interfaces port 1/1/10 macsec admin-state enable
</code>

===== Konfiguration MikroTik =====

<code>
[admin@MikroTik] > /export show-sensitive 
# mar/17/2023 18:23:44 by RouterOS 7.8
# software id = 5S0G-NKK2
#
# model = C52iG-5HaxD2HaxD
# serial number = 
/interface bridge
add name=bridge1
/interface macsec
add cak=f0c20e75ca03c351227f314a5c15683e ckn=58db407c3ae45b719f395a15ee3934506b765235445dffa07c61bf985cf2e376 disabled=no interface=ether2 mtu=1468 \
    name=macsec1 profile=default
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=macsec1
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ipv6 settings
set max-neighbor-entries=15360
/ip address
add address=192.168.2.21/24 interface=bridge1 network=192.168.2.0
/ip dns
set servers=192.168.2.1
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.2.10 routing-table=main suppress-hw-offload=no
/system clock
set time-zone-name=Europe/Berlin
/system ntp client
set enabled=yes
/system ntp client servers
add address=192.168.2.1
/tool sniffer
set filter-interface=ether2
</code>

===== Datendurchsatz mit MACsec =====
<WRAP center round important 60%>
In dieser Messung zeigt sich die Auswirkung einer Software-basierten MACsec Implementierung des MikroTik hAP ax². Der Durchsatz ist ~1/3 geringer und von der Auslastung des Prozessors abhängig.
</WRAP>

<WRAP center round info 60%>
Der Datendurchsatz ohne MACsec Header/Verschlüsselung liegt in diesem Testaufbau bei 940 Mbps.
</WRAP>

<code>
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52176
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52177
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   1.00-2.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   2.00-3.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   3.00-4.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   4.00-5.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   5.00-6.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   6.00-7.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   7.00-8.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   8.00-9.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   9.00-10.00  sec  71.2 MBytes   597 Mbits/sec
[  5]  10.00-10.00  sec   181 KBytes   514 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   711 MBytes   596 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52191
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52192
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   1.00-2.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   2.00-3.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   3.00-4.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   4.00-5.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   5.00-6.00   sec  71.2 MBytes   598 Mbits/sec
[  5]   6.00-7.00   sec  71.2 MBytes   598 Mbits/sec
[  5]   7.00-8.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   8.00-9.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   9.00-10.00  sec  71.2 MBytes   597 Mbits/sec
[  5]  10.00-10.00  sec   199 KBytes   539 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   712 MBytes   597 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52199
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52200
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   1.00-2.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   2.00-3.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   3.00-4.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   4.00-5.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   5.00-6.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   6.00-7.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   7.00-8.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   8.00-9.00   sec  71.1 MBytes   597 Mbits/sec
[  5]   9.00-10.00  sec  71.2 MBytes   597 Mbits/sec
[  5]  10.00-10.00  sec   212 KBytes   569 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   711 MBytes   597 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52204
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52205
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   1.00-2.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   2.00-3.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   3.00-4.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   4.00-5.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   5.00-6.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   6.00-7.00   sec  71.2 MBytes   597 Mbits/sec
[  5]   7.00-8.00   sec  71.1 MBytes   596 Mbits/sec
[  5]   8.00-9.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   9.00-10.00  sec  71.0 MBytes   596 Mbits/sec
[  5]  10.00-10.00  sec   175 KBytes   573 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   711 MBytes   596 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52211
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52212
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  63.1 MBytes   529 Mbits/sec
[  5]   1.00-2.00   sec  63.1 MBytes   530 Mbits/sec
[  5]   2.00-3.00   sec  63.4 MBytes   532 Mbits/sec
[  5]   3.00-4.00   sec  63.3 MBytes   531 Mbits/sec
[  5]   4.00-5.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   5.00-6.00   sec  63.5 MBytes   533 Mbits/sec
[  5]   6.00-7.00   sec  63.3 MBytes   531 Mbits/sec
[  5]   7.00-8.00   sec  63.4 MBytes   531 Mbits/sec
[  5]   8.00-9.00   sec  63.1 MBytes   529 Mbits/sec
[  5]   9.00-10.00  sec  63.4 MBytes   532 Mbits/sec
[  5]  10.00-10.00  sec   126 KBytes   530 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   633 MBytes   531 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52216
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52217
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   1.00-2.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   2.00-3.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   3.00-4.00   sec  70.9 MBytes   594 Mbits/sec
[  5]   4.00-5.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   5.00-6.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   6.00-7.00   sec  71.0 MBytes   595 Mbits/sec
[  5]   7.00-8.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   8.00-9.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   9.00-10.00  sec  70.9 MBytes   595 Mbits/sec
[  5]  10.00-10.00  sec   192 KBytes   547 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   709 MBytes   594 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52227
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52228
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  62.7 MBytes   526 Mbits/sec
[  5]   1.00-2.00   sec  62.9 MBytes   528 Mbits/sec
[  5]   2.00-3.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   3.00-4.00   sec  63.1 MBytes   529 Mbits/sec
[  5]   4.00-5.00   sec  63.1 MBytes   530 Mbits/sec
[  5]   5.00-6.00   sec  63.1 MBytes   529 Mbits/sec
[  5]   6.00-7.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   7.00-8.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   8.00-9.00   sec  63.3 MBytes   531 Mbits/sec
[  5]   9.00-10.00  sec  63.1 MBytes   529 Mbits/sec
[  5]  10.00-10.00  sec   164 KBytes   545 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   631 MBytes   529 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52234
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52235
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.5 MBytes   591 Mbits/sec
[  5]   1.00-2.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   2.00-3.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   3.00-4.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   4.00-5.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   5.00-6.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   6.00-7.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   7.00-8.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   8.00-9.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   9.00-10.00  sec  70.7 MBytes   593 Mbits/sec
[  5]  10.00-10.00  sec   208 KBytes   621 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   708 MBytes   594 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52238
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52239
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   1.00-2.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   2.00-3.00   sec  70.9 MBytes   594 Mbits/sec
[  5]   3.00-4.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   4.00-5.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   5.00-6.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   6.00-7.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   7.00-8.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   8.00-9.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   9.00-10.00  sec  70.9 MBytes   595 Mbits/sec
[  5]  10.00-10.00  sec   194 KBytes   556 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   709 MBytes   594 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52247
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52248
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   1.00-2.00   sec  70.7 MBytes   593 Mbits/sec
[  5]   2.00-3.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   3.00-4.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   4.00-5.00   sec  71.0 MBytes   596 Mbits/sec
[  5]   5.00-6.00   sec  71.0 MBytes   596 Mbits/sec
[  5]   6.00-7.00   sec  71.0 MBytes   596 Mbits/sec
[  5]   7.00-8.00   sec  71.0 MBytes   595 Mbits/sec
[  5]   8.00-9.00   sec  71.0 MBytes   595 Mbits/sec
[  5]   9.00-10.00  sec  71.0 MBytes   596 Mbits/sec
[  5]  10.00-10.00  sec   221 KBytes   626 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   709 MBytes   595 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52258
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52260
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  57.0 MBytes   478 Mbits/sec
[  5]   1.00-2.00   sec  57.6 MBytes   483 Mbits/sec
[  5]   2.00-3.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   3.00-4.00   sec  63.3 MBytes   531 Mbits/sec
[  5]   4.00-5.00   sec  63.3 MBytes   531 Mbits/sec
[  5]   5.00-6.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   6.00-7.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   7.00-8.00   sec  62.9 MBytes   528 Mbits/sec
[  5]   8.00-9.00   sec  63.2 MBytes   530 Mbits/sec
[  5]   9.00-10.00  sec  63.3 MBytes   531 Mbits/sec
[  5]  10.00-10.00  sec  79.2 KBytes   401 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   620 MBytes   520 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
Accepted connection from 192.168.2.19, port 52270
[  5] local 192.168.2.20 port 5201 connected to 192.168.2.19 port 52271
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.00   sec  70.5 MBytes   591 Mbits/sec
[  5]   1.00-2.00   sec  70.8 MBytes   594 Mbits/sec
[  5]   2.00-3.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   3.00-4.00   sec  71.0 MBytes   595 Mbits/sec
[  5]   4.00-5.00   sec  71.0 MBytes   595 Mbits/sec
[  5]   5.00-6.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   6.00-7.00   sec  70.9 MBytes   594 Mbits/sec
[  5]   7.00-8.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   8.00-9.00   sec  70.9 MBytes   595 Mbits/sec
[  5]   9.00-10.00  sec  70.9 MBytes   595 Mbits/sec
[  5]  10.00-10.00  sec   187 KBytes   501 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.00  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.00  sec   709 MBytes   594 Mbits/sec                  receiver
-----------------------------------------------------------
Server listening on 5201
-----------------------------------------------------------
</code>

==== WinBox Statistik zur obigen Messung ====

{{ ::winbox-macsec.png?nolink |}}

===== Detaillierter Verbindungsaufbau: MACsec Key Agreement (MKA) =====

<WRAP center round info 60%>
In den kommenden Tagen füge ich noch weitere Informationen hinzu, unten bereits das Wireshark Capture als ZIP. /Benny
</WRAP>

==== PCAP ====

{{ ::macsec_os6465t-zu-mikrotik.pcap.zip |}}