March 2015

Submission

Proposed IEEE 802 Response to comments onIEEE 802.1AE/FDAmd 1 and FDAmd 2 ballots

Berlin, March 2015

Slide 1

March 2015

Submission

IEEE 802.1Xbx-2014 was submitted to PSDO process after IEEE ratification & publication

Andrew Myles, Cisco

Slide 2

60 day pre-ballot: closes 19 March 2015

• The submission of IEEE 802.1Xbx-2014 after publication under the PSDO was approved by 802 EC in July 2014

• The 60-day pre-ballot ballot opened on 19 January 2015 and closes on 19 March 2015

FDIS ballot:

Submission

Mar 2015

IEEE 802.1AEbn-2011 passed pre-ballot in Feb 2014, and passed FDIS in Feb 2015 with one comment

Slide 3

60 day pre-ballot: passed & comment resolutions liaised

• Pre-ballot on IEEE 802.1AEbn-2011 (N15809) passed in Jan 2014– Voting results in N15857– Passed 9/1/7– Usual comment from China saying they will not recognise the result

• Pre-ballot comment responses were approved by 802.1 WG in March 2014, and were liaised to SC6 as N15945

FDIS ballot: passed on 1 Feb 2015 with one comment

• FDIS closed on 1 Feb 2015, with one comment from China NB– Passed 12/1/23– See N16123

• Standard will be called ISO/IEC/IEEE 8802-1AE:2013/Amd 1

N15857

Submission

Mar 2015

The China NB comments on IEEE 802.1AEbn-2011 require a response

China NB comment

• ISO/IEC/IEEE 8802-1AE:2013/FDAmd1 is based on IEEE 802.1x-2010 which was opposed by China NB in FDIS voting phase because of security problems. By now, these security problems in IEEE 802.1x-2010 still exist. We oppose the two standards based on IEEE 802.1x because of the security problems.

China NB proposed change

• We propose to delete the references of IEEE 802.1X-2010

Slide 4

Submission

Mar 2015

IEEE 802.1AEbw-2013 passed FDIS in Feb 2015 with one comment

Slide 5

60 day pre-ballot: passed & comment resolutions liaised

• Pre-ballot on IEEE 802.1AEbw-2013 (N15810) passed in Jan 2014– Voting results in N15858 – Passed 9/1/7– Usual comment from China saying they will not recognise the result

• Pre-ballot comment responses were approved by 802.1 WG in March 2014, and were liaised to SC6 as N15946

FDIS ballot: passed on 1 Feb 2015 with one comment

• FDIS closed on 1 Feb 2015, with one comment from China NB– Passed 12/1/23– See N16124

• Standard will be called ISO/IEC/IEEE 8802-1AE:2013/Amd 2

N15858

Submission

Mar 2015

The China NB comments on IEEE 802.1AEbw-2013 require a response

China NB comment

• ISO/IEC/IEEE 8802-1AE:2013/FDAmd1 is based on IEEE 802.1x-2010 which was opposed by China NB in FDIS voting phase because of security problems. By now, these security problems in IEEE 802.1x-2010 still exist. We oppose the two standards based on IEEE 802.1x because of the security problems.

China NB proposed change

• We propose to delete the references of IEEE 802.1X-2010

Slide 6

Submission

Mar 2015

The SC may consider a response to China NB FDIS comments on 802.1AEbn and 802.1AEbw

• The FDIS comments on IEEE 802.1AEbn-2011and IEEE 802.1AEbw-2013 from China NB are almost identical

• Karen Randall has agreed to draft responses for consideration by the SC

• Approval by the 802.1 WG is also required

Slide 7

Submission

Mar 2015

The SC will consider a proposed response to China NB comment on 802.1AEbn-2011

Proposed response to China NB comment on 802.1AEbn-2011

• IEEE thanks the China NB for its comment on the 802.1AE/FDAmd 1 ballot.

• However, this amendment is based on IEEE 802.1AE, MAC Security, and not IEEE 802.1X, Port Based Network Access Control as asserted in the China NB’s comment.

• The purpose for this amendment is to specify and support optional use of an additional cipher suite: AES-256 for MAC Security using GCM (Galois Counter Mode).

Slide 8

Submission

Mar 2015

The SC will consider a proposed response to China NB comment on 802.1AEbw-2013

Proposed response to China NB comment on 802.1AEbw-2013

• IEEE thanks the China NB for its comment on the 802.1AE/FDAmd 1 ballot.

• However, this amendment is based on IEEE 802.1AE, MAC Security, and not IEEE 802.1X, Port Based Network Access Control as asserted in the China NB’s comment.

• This amendment describes an optional mode for MACsec that defines a method to extend the packet number to support higher network rates while maintaining system functionality and operational efficiency.

Slide 9

Submission

Mar 2015

IEEE 802.1Xbx-2014 was submitted to PSDO process after IEEE ratification & publication

Slide 10

60 day pre-ballot: closes 19 March 2015

• The submission of IEEE 802.1Xbx-2014 after publication under the PSDO was approved by 802 EC in July 2014

• The 60-day pre-ballot ballot opened on 19 January 2015 and closes on 19 March 2015

FDIS ballot: