A METHOD FOR GENERATING SAK, A METHOD FOR REALIZING MAC SECURITY AND A NETWORK DEVICE

摘要

A method for generating SAK, a method for realizing MAC security and a networking device are provided. A method for generating SAK includes: a sending KSP instance sends KSPDU to the other KSP instances in the same CA. The KSPDU includes: the CKI of the instance, the information about the MACsec level which the sending KSP instance belongs to; if the receiving KSP instance and the sending KSP instance belong to the CA with the same MACsec level, the SAK is generated based on the KSPDU. The MACsec of multiple levels in the communication network and the secure MACsec network communication with multiple levels are realized, thus ensuring the confidentiality of the network communication.