🔐

MACsec: Layer 2 Encryption

Complex

Free preview · 2 of 5 steps

Encrypting Ethernet at the MAC layer

IPsec encrypts at Layer 3 (between IP addresses). TLS encrypts at Layer 7 (application). But what about traffic on the wire between two switches — before it even becomes a routed packet?

MACsec (IEEE 802.1AE) encrypts at Layer 2, securing every Ethernet frame on a physical link. It's transparent to all upper layers — IP, TCP, applications work exactly as normal, but the frames are encrypted at the MAC level.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step