MACsec encryption mode

The main modes of encryption in MACsec are:

  • VLAN in clear text (WAN mode)

  • VLAN encrypted

The 802.1AE standard dictates that the 802.1Q VLAN must be encrypted. However, some vendors provide the option of configuring MACsec on a port with the VLAN in clear text.

The 7705 SAR supports both modes.

The following figure shows the encrypted VLAN and the VLAN in clear text.

Figure 1. 802.1AE LAN and WAN modes and VLAN encrypted and clear