Implementation of MACSec (IEEE 802.1AE)

Tartasprint 0 Points de réputation
2025-03-17T13:32:11.88+00:00

Hello,

I would like to use MACSec(as in IEEE 802.1AE) to secure a physical direct link between two machines. Turns out this is supported in the Linux kernel since 2016. I was very happy about it, since most of my machines use Linux the kernel. For the few that use Windows i haven't been able to find a solution.

I know the Cisco Secure Client allows MACSec connections from a Windows host to their hardware (switches or whatever). But I dont have Cisco hardware.

I read a few things about how the network stack works in Windows, and from what I understand, to get a working MACSec link I would have to write a NDIS driver.

There I got lost a bit between the various possibilities. Reading the documentation of Npcap it looks like I either want to write an Intermediate Driver or a Protocol Driver.

Reading the Intermediate Driver docs, it seems the driver would have to be a 1-to-1 MUX Intermediate Driver.

What I am not sure of, is even if I figure out how to implement it, will I be able to plug it into the network stack ? That is can I tell the already existing upper layer (ARP,DHCP,IP,TCP...) drivers to use my MACSec driver (Protocol driver or MUX Intermediate driver, depending on which one is right) ? Or would I have to rewrite those too ?

Regards

Windows 11
Windows 11
Système d’exploitation Microsoft conçu pour la productivité, la créativité et la facilité d’utilisation.
33 questions
0 commentaires Aucun commentaire
{count} votes

Votre réponse

Les réponses peuvent être marquées comme Réponses acceptées par l’auteur de la question, ce qui permet aux utilisateurs de connaître la réponse qui a résolu le problème de l’auteur.