IEEE802.1AE2018版本1.2局域网和城域网-媒体访问控制安全

需积分: 1 163 浏览量 2022-12-05 21:18:08 上传评论 3 收藏 1.51MB PDF 举报

《IEEE802.1AE 2018 版本1.2 局域网和城域网-媒体访问控制安全》是IEEE在2018年发布的一项标准，其目的是为局域网（LAN）和城域网（MAN）提供更高级别的媒体访问控制（MAC）安全。该标准是对之前版本的修订，整合了2006年的IEEE 802.1AE、2011年的IEEE 802.1AEbn、2013年的IEEE 802.1AEbw以及2017年的IEEE 802.1AEcg，旨在不断改进和更新网络安全措施。 IEEE 802.1AE标准，通常被称为MACsec（MAC层安全），是一个针对物理层（PHY）之上的数据链路层的协议，它的主要任务是保护网络中MAC地址级别的通信。MACsec通过加密和验证机制，确保在局域网和城域网中的数据传输过程中的完整性与机密性，防止未经授权的访问和中间人攻击。标准中的核心概念包括： 1. **MAC安全控制单元（MACSec Control Unit, MCU）**：负责协商和设置安全策略，如密钥交换、身份验证以及安全策略的配置。 2. **MAC安全保护单元（MACSec Protect Unit, MPU）**：在数据传输时实施安全策略，对数据进行加解密处理，确保只有经过身份验证的设备才能接入网络并交换数据。 3. **安全关联（Security Association, SA）**：定义了设备间的安全关系，包括使用的加密算法、密钥和认证方法等。 4. **密钥管理**：MACsec支持动态密钥管理，允许定期更换密钥以增强安全性，同时也支持预共享密钥（PSK）和基于802.1X的认证方式。 5. **数据完整性检查**：通过校验和或消息认证码（MAC）来确保数据未被篡改，防止数据包在传输过程中被恶意修改。 6. **机密性保护**：使用加密技术，如AES（高级加密标准），对数据进行加密，保护数据免受监听。 7. **连接完整性（Connectionless Integrity, CI）和机密性保护（Confidentiality, C)**：这两种服务可以单独或同时启用，CI用于防止数据篡改，C用于防止数据被窃听。 8. **边缘保护（Edge Protection）**：在接入点实现，只允许认证的设备接入网络，防止非法设备的接入。 9. **端到端保护（End-to-End Protection）**：确保数据在整个传输路径中的安全，不仅仅是接入点的安全。 10. **快速保护（Fast Protection Switching）**：在检测到安全事件时，能够迅速切换到备用安全策略，以减少服务中断时间。 11. **可扩展性**：MACsec设计考虑了大型网络的部署，可以随着网络规模的增长而扩展，适应各种不同的应用场景。 IEEE 802.1AE 2018版标准的发布，为局域网和城域网提供了更加完善的MAC层安全解决方案，有助于构建更安全、更可靠的网络环境，尤其对于企业级和关键基础设施的网络来说，这一标准的实施显得尤为重要。

资源详情

资源评论

P802.1AE™–Rev/D1.2 April 17, 2018

Draft Revision of IEEE Standard for Local and metropolitan area networks—Media Access Control (MAC) Security

This is an unapproved IEEE Standards draft, subject to change.

Title page

P802.1AE™–Rev/D1.2

April 17, 2018

(Revision of IEEE Std 802.1AE™–2006

Incorporating IEEE Std 802.1AEbn™-2011,

IEEE Std 802.1AEbw™-2013,

IEEE Std 802.1AEcg™-2017)

Draft Revision of IEEE Standard for

Local and metropolitan area networks—

Media Access Control (MAC) Security

Prepared by the

Security Task Group of IEEE 802.1

Sponsor

LAN/MAN Standards Committee

of the

IEEE Computer Society

Three Park Avenue

New York, New York 10016-5997, USA

This document is an unapproved draft of a proposed IEEE Standard. As such, this document is subject to

change. USE AT YOUR OWN RISK! IEEE copyright statements SHALL NOT BE REMOVED from draft

or approved IEEE standards, or modified in any way. Because this is an unapproved draft, this document

must not be utilized for any conformance/compliance purposes. Permission is hereby granted for officers

from each IEEE Standards Working Group or Committee to reproduce the draft document developed by that

Working Group for purposes of international standardization consideration. IEEE Standards Department

must be informed of the submission for consideration prior to any reproduction for international

standardization consideration (stds.ipr@ieee.org). Prior to adoption of this document, in whole or in part, by

another standards development organization, permission must first be obtained from the IEEE Standards

Department (stds.ipr@ieee.org). When requesting permission, IEEE Standards Department will require a

copy of the standard development organization's document highlighting the use of IEEE content. Other

entities seeking permission to reproduce this document, in whole or in part, must also obtain permission

from the IEEE Standards Department.

IEEE Standards Activities Department

445 Hoes Lane

Piscataway, NJ 08854, USA

Authorized licensed use limited to: University of Illinois. Downloaded on July 03,2018 at 18:40:40 UTC from IEEE Xplore. Restrictions apply.

P802.1AE™–Rev/D1.2 April 17, 2018

Draft Revision of IEEE Standard for Local and metropolitan area networks—Media Access Control (MAC) Security

This is an unapproved IEEE Standards draft, subject to change.

Important Notices and Disclaimers Concerning IEEE Standards Documents

IEEE documents are made available for use subject to important notices and legal disclaimers. These notices

and disclaimers, or a reference to this page, appear in all standards and may be found under the heading

“Important Notices and Disclaimers Concerning IEEE Standards Documents.” They can also be obtained on

request from IEEE or viewed at http://standards.ieee.org/IPR/disclaimers.html

Notice and Disclaimer of Liability Concerning the Use of IEEE Standards

Documents

IEEE Standards documents (standards, recommended practices, and guides), both full-use and trial-use, are

developed within IEEE Societies and the Standards Coordinating Committees of the IEEE Standards

Association (“IEEE-SA”) Standards Board. IEEE (“the Institute”) develops its standards through a

consensus development process, approved by the American National Standards Institute (“ANSI”), which

brings together volunteers representing varied viewpoints and interests to achieve the final product. IEEE

Standards are documents developed through scientific, academic, and industry-based technical working

groups. Volunteers in IEEE working groups are not necessarily members of the Institute and participate

without compensation from IEEE. While IEEE administers the process and establishes rules to promote

fairness in the consensus development process, IEEE does not independently evaluate, test, or verify the

accuracy of any of the information or the soundness of any judgments contained in its standards.

IEEE Standards do not guarantee or ensure safety, security, health, or environmental protection, or ensure

against interference with or from other devices or networks. Implementers and users of IEEE Standards

documents are responsible for determining and complying with all appropriate safety, security,

environmental, health, and interference protection practices and all applicable laws and regulations.

IEEE does not warrant or represent the accuracy or content of the material contained in its standards, and

expressly disclaims all warranties (express, implied and statutory) not included in this or any other

document relating to the standard, including, but not limited to, the warranties of: merchantability; fitness

for a particular purpose; non-infringement; and quality, accuracy, effectiveness, currency, or completeness of

material. In addition, IEEE disclaims any and all conditions relating to: results; and workmanlike effort.

IEEE standards documents are supplied “AS IS” and “WITH ALL FAULTS. ”

Use of an IEEE standard is wholly voluntary. The existence of an IEEE standard does not imply that there

are no other ways to produce, test, measure, purchase, market, or provide other goods and services related to

the scope of the IEEE standard. Furthermore, the viewpoint expressed at the time a standard is approved and

issued is subject to change brought about through developments in the state of the art and comments

received from users of the standard.

In publishing and making its standards available, IEEE is not suggesting or rendering professional or other

services for, or on behalf of, any person or entity nor is IEEE undertaking to perform any duty owed by any

other person or entity to another. Any person utilizing any IEEE Standards document, should rely upon his

or her own independent judgment in the exercise of reasonable care in any given circumstances or, as

appropriate, seek the advice of a competent professional in determining the appropriateness of a given IEEE

standard.

IN NO EVENT SHALL IEEE BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,

EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO:

PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR

BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,

WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR

OTHERWISE) ARISING IN ANY WAY OUT OF THE PUBLICATION, USE OF, OR RELIANCE UPON

ANY STANDARD, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE AND

REGARDLESS OF WHETHER SUCH DAMAGE WAS FORESEEABLE.

Authorized licensed use limited to: University of Illinois. Downloaded on July 03,2018 at 18:40:40 UTC from IEEE Xplore. Restrictions apply.

P802.1AE™–Rev/D1.2 April 17, 2018

Draft Revision of IEEE Standard for Local and metropolitan area networks—Media Access Control (MAC) Security

This is an unapproved IEEE Standards draft, subject to change.

Translations

The IEEE consensus development process involves the review of documents in English only. In the event

that an IEEE standard is translated, only the English version published by IEEE should be considered the

approved IEEE standard.

Official statements

A statement, written or oral, that is not processed in accordance with the IEEE-SA Standards Board

Operations Manual shall not be considered or inferred to be the official position of IEEE or any of its

committees and shall not be considered to be, or be relied upon as, a formal position of IEEE. At lectures,

symposia, seminars, or educational courses, an individual presenting information on IEEE standards shall

make it clear that his or her views should be considered the personal views of that individual rather than the

formal position of IEEE.

Comments on standards

Comments for revision of IEEE Standards documents are welcome from any interested party, regardless of

membership affiliation with IEEE. However, IEEE does not provide consulting information or advice

pertaining to IEEE Standards documents. Suggestions for changes in documents should be in the form of a

proposed change of text, together with appropriate supporting comments. Since IEEE standards represent a

consensus of concerned interests, it is important that any responses to comments and questions also receive

the concurrence of a balance of interests. For this reason, IEEE and the members of its societies and

Standards Coordinating Committees are not able to provide an instant response to comments or questions

except in those cases where the matter has previously been addressed. For the same reason, IEEE does not

respond to interpretation requests. Any person who would like to participate in revisions to an IEEE

standard is welcome to join the relevant IEEE working group.

Comments on standards should be submitted to the following address:

Secretary, IEEE-SA Standards Board

445 Hoes Lane

Piscataway, NJ 08854 USA

Laws and regulations

Users of IEEE Standards documents should consult all applicable laws and regulations. Compliance with the

provisions of any IEEE Standards document does not imply compliance to any applicable regulatory

requirements. Implementers of the standard are responsible for observing or referring to the applicable

regulatory requirements. IEEE does not, by the publication of its standards, intend to urge action that is not

in compliance with applicable laws, and these documents may not be construed as doing so.

Copyrights

IEEE draft and approved standards are copyrighted by IEEE under U.S. and international copyright laws.

They are made available by IEEE and are adopted for a wide variety of both public and private uses. These

include both use, by reference, in laws and regulations, and use in private self-regulation, standardization,

and the promotion of engineering practices and methods. By making these documents available for use and

adoption by public authorities and private users, IEEE does not waive any rights in copyright to the

documents.

Authorized licensed use limited to: University of Illinois. Downloaded on July 03,2018 at 18:40:40 UTC from IEEE Xplore. Restrictions apply.

P802.1AE™–Rev/D1.2 April 17, 2018

Draft Revision of IEEE Standard for Local and metropolitan area networks—Media Access Control (MAC) Security

This is an unapproved IEEE Standards draft, subject to change.

Photocopies

Subject to payment of the appropriate fee, IEEE will grant users a limited, non-exclusive license to

photocopy portions of any individual standard for company or organizational internal use or individual,

non-commercial use only. To arrange for payment of licensing fees, please contact Copyright Clearance

Center, Customer Service, 222 Rosewood Drive, Danvers, MA 01923 USA; +1 978 750 8400. Permission to

photocopy portions of any individual standard for educational classroom use can also be obtained through

the Copyright Clearance Center.

Updating of IEEE Standards documents

Users of IEEE Standards documents should be aware that these documents may be superseded at any time

by the issuance of new editions or may be amended from time to time through the issuance of amendments,

corrigenda, or errata. An official IEEE document at any point in time consists of the current edition of the

document together with any amendments, corrigenda, or errata then in effect.

Every IEEE standard is subjected to review at least every ten years. When a document is more than ten years

old and has not undergone a revision process, it is reasonable to conclude that its contents, although still of

some value, do not wholly reflect the present state of the art. Users are cautioned to check to determine that

they have the latest edition of any IEEE standard.

In order to determine whether a given document is the current edition and whether it has been amended

through the issuance of amendments, corrigenda, or errata, visit the IEEE-SA Website at

http://ieeexplore.ieee.org

or contact IEEE at the address listed previously. For more information about the

IEEE SA or IEEE’s standards development process, visit the IEEE-SA Website at http://standards.ieee.org

Errata

Errata, if any, for all IEEE standards can be accessed on the IEEE-SA Website at the following URL:

http://standards.ieee.org/findstds/errata/index.html

. Users are encouraged to check this URL for errata

periodically.

Patents

Attention is called to the possibility that implementation of this standard may require use of subject matter

covered by patent rights. By publication of this standard, no position is taken by the IEEE with respect to the

existence or validity of any patent rights in connection therewith. If a patent holder or patent applicant has

filed a statement of assurance via an Accepted Letter of Assurance, then the statement is listed on the

IEEE-SA Website at http://standards.ieee.org/about/sasb/patcom/patents.html

. Letters of Assurance may

indicate whether the Submitter is willing or unwilling to grant licenses under patent rights without

compensation or under reasonable rates, with reasonable terms and conditions that are demonstrably free of

any unfair discrimination to applicants desiring to obtain such licenses.

Essential Patent Claims may exist for which a Letter of Assurance has not been received. The IEEE is not

responsible for identifying Essential Patent Claims for which a license may be required, for conducting

inquiries into the legal validity or scope of Patents Claims, or determining whether any licensing terms or

conditions provided in connection with submission of a Letter of Assurance, if any, or in any licensing

agreements are reasonable or non-discriminatory. Users of this standard are expressly advised that

determination of the validity of any patent rights, and the risk of infringement of such rights, is entirely their

own responsibility. Further information may be obtained from the IEEE Standards Association.

Authorized licensed use limited to: University of Illinois. Downloaded on July 03,2018 at 18:40:40 UTC from IEEE Xplore. Restrictions apply.

剩余236页未读，继续阅读

评论收藏

内容反馈

IEEE802.1AE 2018 版本1.2 局域网和城域网-媒体访问控制安全

评论0

最新资源

IEEE802.1AE 2018 版本1.2 局域网和城域网-媒体访问控制安全

评论0

最新资源

相关推荐

802.1标准集合

IEEE 802.1AG

IEEE Std 802.1AE-2018 局域网和城域网-媒体访问控制（MAC）安全 - 完整英文电子版（239页）

IEEE Std 802.1AEbn-2011

IEEE Std 802.1AE-2006

IEEE 802.1

IEEE Std 802.1AR-2018 局域网和城域网-确保设备身份安全 - 完整英文电子版（73页）

IEEE Std 802.1AX-2020 局域网和城域网-链路聚合 - 完整英文电子版（333页）

IEEE 802.3ae

局域网-IEEE802系列标准.pdf

IEEE802.3-2012

IEEE 802.3-2018.zip

IEEE802.3协议标准---（光模块）

IEEE802.3-2005.pdf

IEEE802.3-2005标准

802.3ae-2002

IEEE Std 802.1AE-2018—Cor 1-2020 Local and metropolitan area net

IEEE Std 802.1AE -2018 Local and metropolitan area networks— Med

IEEE Std 802.1AE-2018-Cor 1-2020 Local and metropolitan area net

802.1协议族标准及相关文档打包下载

局域网_IEEE802系列标准.pdf

局域网IEEE802系列标准借鉴.pdf

IEEE 802 标准集

局域网_IEEE802系列标准参考.pdf

802.3总结.docx