Abstract
A link aggregation group (LAG) whose member links are individually protected by MACsec withdraws a member link from frame distribution when MACsec protection on that link is lost while the link remains physically up. The MACsec entity on the link reports the fault to the LAG function, which clears the Synchronization, Collecting, and Distributing state for the port and transmits a Link Aggregation Control Protocol data unit at once, so that both ends stop hashing traffic onto the link within one exchange. A reserved bit or a new element of the data unit advertises whether MACsec is operational on each link, allowing each end to detect mismatched security settings. An alarm is raised while the link is withdrawn, and the link is restored only after MACsec has remained operational for a stabilization interval. The same withdrawal is applied in statically configured bundles, distributed and multi-chassis LAGs, and weighted distribution.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Anonymous, "Withdrawing a Link Aggregation Group Member Link from Frame Distribution upon Loss of MACsec Protection", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/12379