Network Encryption

[ciscolqbly]

I would like to encrypt traffic between two switches.

what is the best option (Cisco and none cisco)?

device/software/hardware

[Karsten Iwen]

Look for devices that support MACsec (802.1AE). This is a standard, but be aware that there are proprietary implementations. On the Cisco side, this function is implemented in the 3650/3850 and higher line of switches. From the older generation of switches, the 3750-X also implements MACsec.

Another solution is to place firewalls/routers on both sides and implement IPsec VPNs.

[ciscolqbly]

any freeware traffic Encryption?

[Karsten Iwen · Accepted solution]

If you want to achieve line-rate performance, it should be implemented in the switches. For the VPN, you could use any open-source firewall that supports IPSec. If unsure, take a look at pfsSense.