Using IPsec encryption on switch links

[andy_4578]

Hi,

Is it possible to set up switch links to use ipsec encryption? i.e....

3750-------------------2960  with the trunk using AES 256 encryption

I couldnt find any examples on the web or even any attempting it.

[Abzal]

Hi Andy,

Please refer this link, with the same problem

https://supportforums.cisco.com/thread/263171

Hope it will help.

[andy_4578]

So is there any thing that could be done to secure LAN traffic on the switches? (This is for MOD so the LAN needs to be highly secure)

[Reza Sharifi · Accepted solution]

With older switches, it is not possible, but if you are using the newer switches i.e. 3560X or 3750X you can use Macsec

Have a look at this link for more info:

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/configuration/guide/swmacsec.html

HTH

[andy_4578]

Yes that might be perfect. So that would prevent MAC spoofing of 3rd party contractors evesdropping on traffic?

All the switches will be new as they havent been purchased yet

[Reza Sharifi · Accepted solution]

All the switches will be new as they havent been purchased yet

Ok, but make sure to talk to your sales and SE guys before purchasing, because not all feature sets i.e. Lan Base support it.

HTH