MacSec (or 802.1ae) was initially designed to use AES with 128 Bit key length. To allow for fast processing the operation mode is GCM. Later, the key length was increased to 256 Bit to make it resistant to quantum computer attacks. But be aware that not all (not even many) devices have implemented the 256 Bit operation.
