Re: IEEE MACsec

[Stephen Stuart <stuart () tech org>]

If you are going to deploy MACSEC, my advice is test, test, and test,
especially (but not only) if you have different vendors'
implementations of MACSEC on either end of the link.

Test that MACSEC comes up.

Test that it recovers from link flaps.

Test key rotation.

Test recovery from link flaps during key rotation.

Test all permutations of recovery from admin down/up on both sides.

Test everything you can think of, then think of more things to test.

Stephen