MACsec = Media Access Control Security (802.1AE IEEE). It provides point-to-point encryption (AES-GCM-128 by default) over ethernet traffic. MACsec support is included from kernel 4.6 or in Centos/RHEL 7.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| HOST A: | |
| ip link add link eth1 macsec0 type macsec | |
| ip macsec add macsec0 tx sa 0 pn 1 on key 01 11111111111111111111111111111111 | |
| ip macsec add macsec0 rx address bb:bb:bb:bb:bb:bb port 1 | |
| ip macsec add macsec0 rx address bb:bb:bb:bb:bb:bb port 1 sa 0 pn 100 on key 02 22222222222222222222222222222222 | |
| ip link set dev macsec0 up | |
| ip address add 172.16.16.1/24 dev macsec0 | |
| HOST B: | |
| ip link add link eth1 macsec0 type macsec | |
| ip macsec add macsec0 tx sa 0 pn 1 on key 02 22222222222222222222222222222222 | |
| ip macsec add macsec0 rx address aa:aa:aa:aa:aa:aa port 1 | |
| ip macsec add macsec0 rx address aa:aa:aa:aa:aa:aa port 1 sa 0 pn 100 on key 01 11111111111111111111111111111111 | |
| ip link set dev macsec0 up | |
| ip address add 172.16.16.2/24 dev macsec0 |
Vladimir Smitka 
Leave a comment