MACsec encryption mode
The main modes of encryption in MACsec are:
VLAN in clear text (WAN mode)
VLAN encrypted
The 802.1AE standard dictates that the 802.1Q VLAN must be encrypted. However, some vendors provide the option of configuring MACsec on a port with the VLAN in clear text.
The 7705 SAR supports both modes.
The following figure shows the encrypted VLAN and the VLAN in clear text.