ExpressRoute Direct MACsec SciState Enabled Enhancement

[JeffBor]

ExpressRoute Direct MACsec SciState Enabled Enhancement

[RamanathanChinnappan-MSFT]

@JeffBor
Thanks for your feedback! We will investigate and update as appropriate.

[SaibabaBalapur-MSFT]

@JeffBor Regarding your question about why .SciState should be enabled, it is because SCI is a required parameter for MACsec to function. MACsec is a security technology that provides secure communication over Ethernet links. It is used to encrypt traffic between two endpoints and prevent unauthorized access to the network.

In the case of Azure ExpressRoute, enabling SCI is necessary to establish a secure connection between the Azure datacenter and your on-premises network. The reason for enabling SCI on both sides is to ensure that the MACsec keys are synchronized and that the traffic is properly encrypted and decrypted.

if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

[JeffBor]

@JeffBor Regarding your question about why .SciState should be enabled, it is because SCI is a required parameter for MACsec to function. MACsec is a security technology that provides secure communication over Ethernet links. It is used to encrypt traffic between two endpoints and prevent unauthorized access to the network.

In the case of Azure ExpressRoute, enabling SCI is necessary to establish a secure connection between the Azure datacenter and your on-premises network. The reason for enabling SCI on both sides is to ensure that the MACsec keys are synchronized and that the traffic is properly encrypted and decrypted.

if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

Thx @SaibabaBalapur-MSFT , thanks for the explanation (which we already knew). But "Optional) To activate the ports that are in Administrative Down state, run the following commands:" doesn't match the topic (SciState). Recommend "(Optional) To enable SCI on the ports, run the following commands:"