Trustsec Without Authentication

[Patrick McHenry]

Hi,

I would like to encrypt traffic between 2 switches and don't really see the need to authenticate the two switches with each other. 

Is it possible to run Trustsec between two switches without authentication? Or, is authentication required as part of the encryption process?

Thank you

[jan.nielsen]

You just need a psk for the encryption

http://www.petenetlive.com/KB/Article/0001000.htm

[Patrick McHenry]

Jan - 

Will I need a MACsec module or can I perform this between line ports? I was just on the page you pasted - funny. In the process of labbing it now.

Thank you

[jan.nielsen]

I beleive that switch platforms that support macsec can run this on all ports

[Marvin Rhoads]

There is a compatibility matrix - Table 3 in the Trustsec System Bulletin - that shows which features are supported natively in hardware, which require a module and which don't support MACsec at all.