DCI 10 gig connection with Encryption

[pratheesh.venu]

Hi,

We are designing a 10 gig DCI interconnect between two DCs which are 800 miles apart in US. Please share your input on settig up a layer two link with data encryption.

I am trying to address the following questions:

Is there a distance limit for VSL solution and will it support 10 Gig?

Do IP MPLS offer 10 Gig connectivity across DCs (approximately 800 Miles in US) ?

Does Nexus support vPC with MACSec(802.1 AE) across the DC? If yes, how would it handle reassembling of  encrypted frames traversing across two separate links?

I understand MACSec will add approximately 32 bytes per each frame. What would be the approximate throughput degradation on a 10 Gig DCI with encryption?

Industry best practice on setting up encryption for 10 gig DCI links

Thank You

Pratheesh

[Oleksandr Nesterov]

Hello Paratheesh

Here is the link that describes TrustSec implementation on N7k platform:

http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_5.x_chapter_01101.html

And Cisco Data Center Interconnect Design and Deployment guide:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/DCI2_External.pdf

Check page 69 for config sample.

HTH,

Alex