Q-in-Q security

[Mohamed ElHoussini]

Hi All,

i've configured Q-in-Q between 2 sites successfully but what i'm searching for is security over it.

as the data will be sent in clear text over the provider mpls network so we need to secure it.

the configuration from my side 

interface GigabitEthernet1/0/16
 description ***TO_CORE_MAIN_1/13/17 ***
 switchport access vlan 527
 switchport mode dot1q-tunnel
 no cdp enable
end

[Vasilii Mikhailovskii]

Hello.

What about MACsec or L2TPv3 with encryption?

[arulgobi1]

Will macsec work properly when transit through another L2 processing devices i've doubt on that. I think there are L2 encryption appliances . Or add another layer of tunneling to provide the security. 

[Mohamed ElHoussini]

Hi,

thnx for your reply.

could you please clarify "another layer of tunneling"