[172670] in North American Network Operators' Group
Re: MACsec SFP
daemon@ATHENA.MIT.EDU (Saku Ytti)
Mon Jun 30 04:54:35 2014
X-Original-To: nanog@nanog.org
Date: Mon, 30 Jun 2014 11:54:21 +0300
From: Saku Ytti <saku@ytti.fi>
To: nanog@nanog.org
In-Reply-To: <25D793AF-942F-40A2-9B0D-545D1C932D1A@gdt.id.au>
Errors-To: nanog-bounces@nanog.org
On (2014-06-30 17:21 +0930), Glen Turner wrote:
> What you really want isn’t DHCP-like, but simple AND-mask OR-set register handling. You’d provide your customers with the magic numbers.
>
> interface …
> gbic-register [if REGISTER AND-MASK VALUE]… [set REGISTER AND-MASK OR-VALUE]…
> gbic-register …
>
> Assuming that the GBIC programming doesn’t change PHY requirements you are done.
It could be lot more user-friendly with syntactic sugar for strings, ip
addresses etc.
So you'd know you'll push crypto key string to register N1 and crypto integer
(implying which algo to use) in regisrter N2, so you'd get something like.
gbic-register N1 string "supahsecret"
dgib-register N2 int 4
Far more user-friendly.
--
++ytti