ANYsec packet format

ANYsec MPLS provides packet encryption formats that are different from the MACsec packet formats.

MACsec leaves the MAC 802.1AE header in clear text while authenticating the entire packet in the LAN and MACsec WAN mode leaves the dot1q VLANs in clear text and unauthenticated. With ANYsec, the entire MPLS label stack is in clear text and unauthenticated. This allows an LSR to manipulate the MPLS label stack while the system encrypts and authenticates the payload. The following figure shows ANYsec MPLS packet authentication.

Figure 1. ANYsec MPLS packet authentication