Switch to Switch Encryption

[Info.cis]

Hello

I have to establish an optical link with the traffic to be encrypted between two switches WS-C3850-48T and WS-C2960X-24PS-L. According to the specification, 2960 switches do not support MACSec. So, if there is any possibility for L2 encryption with our configuration?

Thank you.

Andrii

[Leo Laohoo]

You will need to get a pair of encryptors and deploy them at each end.  

Otherwise, replace both switches with ones that support MACSEC.

[Info.cis]

Dear Leo,

Would you be also so kind to advise example model for such hardware encryptors?

Thank you in advance.

[Karsten Iwen · Accepted solution]

As the dedicated encryptors are typically quite expensive, I would also think about deploying a Catalyst C3560CX-8PC in addition to the 2960-X to implement MacSec on that device. If the 2960-X is enough for your general usage, this could be much cheaper than a completely new switch or 2 dedicated encryptors.