MAC Sec [Switch to Switch]

[Sergiy Pyvovaroff]

Hi All!

My question is about deploying MacSec over L2 MAN provider.

I have HQ office and some Big office linked via MAN provider VLAN(X). Same provider provides L3 MPLS service with other VLAN(Y) for low speed far shops and offices.  Can I use MACSEC on VLANX between Cat4507+E/Sup7L-E and Cat 3560X with Service Module, when traffic passes through the other switches, and network provider could?

Thanks  All!

[hobbe]

Hi

This is to my understanding not possible.

Since it is hop by hop you can not have another device between your endpoints.

(I am not sure what happens if you set a hub there.)

good luck

HTH