Uploaded June 2026 | Updated September 2026, 2 weeks ago
MACsec (IEEE 802.1AE) encrypts Ethernet frames hop-by-hop at Layer 2 — before traffic even hits IP — making it one of the strongest protections you can put on wire. It's been in the standards for years, hardware support is widespread, and yet most organizations aren't running it. JJ and Drew dig into why: the hardware and licensing gotchas, how MACsec Key Agreement (MKA) works with 802.1X as the key exchange mechanism, where it makes sense (campus uplinks, datacenter interconnects, WAN hand-offs) and where it doesn't, and why it's becoming harder to ignore as zero trust frameworks push encryption further down the stack.
PP114
AdSpot Sponsor: Meter
Meter delivers full-stack networking—wired, wireless, and cellular—to leading enterprises. It’s a single integrated solution with everything included. Meter has designed the hardware, written the firmware, and built the software. Meter deploys and manages everything required at your site, or sites, so that you get performant, reliable, and secure connectivity. If you’re ready for fast, secure, and scalable connectivity without the complexity of managing multiple providers or tools, it’s time to check out Meter. Go to meter.com/packetprotector to book a demo now!
Links:
Many IEEE standards docs are available free with the IEEE Get Program, sign up for a free IEEE personal account) to download. Look under the Specification -- 802.1 group for these.
802.1AE: MAC Security (MACsec) Working Group Page - https://1.ieee802.org/security/802-1ae
802.1AE: MAC Security (MACsec) for PDF download via IEEE Get Program - ieeexplore.ieee.org/document/8585421
802.1AEdk-2023: MACsec Security Amendment 4: MAC Privacy Protection for PDF download via IEEE Get Program - ieeexplore.ieee.org/document/10225636
802.1AR: Secure Device Identity Working Group Page - https://1.ieee802.org/security/802-1ar
802.1AR: Secure Device Identity for PDF download via IEEE Get Program - ieeexplore.ieee.org/document/8423794
MACsec Key Agreement Protocol - Extreme Networks
documentation.extremenetworks.com/VOSS/SW/89/VOSSUserGuide/GUID-C8FADFC0-E2C0-4AAA-A205-0403E6D0F844.shtml
MACsec Explained: Everything You Need to Know - Rambus
rambus.com/blogs/macsec
Packet Protector is part of the Packet Pushers network. Visit our website to find more great networking and technology podcasts, along with tutorial videos, the Human Infrastructure newsletter, and loads more resources for building your IT career. packetpushers.net
MACsec (IEEE 802.1AE) encrypts Ethernet frames hop-by-hop at Layer 2 — before traffic even hits IP — making it one of the strongest protections you can put on wire. It's been in the standards for years, hardware support is widespread, and yet most organizations aren't running it. JJ and Drew dig into why: the hardware and licensing gotchas, how MACsec Key Agreement (MKA) works with 802.1X as the key exchange mechanism, where it makes sense (campus uplinks, datacenter interconnects, WAN hand-offs) and where it doesn't, and why it's becoming harder to ignore as zero trust frameworks push encryption further down the stack.
PP114
AdSpot Sponsor: Meter
Meter delivers full-stack networking—wired, wireless, and cellular—to leading enterprises. It’s a single integrated solution with everything included. Meter has designed the hardware, written the firmware, and built the software. Meter deploys and manages everything required at your site, or sites, so that you get performant, reliable, and secure connectivity. If you’re ready for fast, secure, and scalable connectivity without the complexity of managing multiple providers or tools, it’s time to check out Meter. Go to meter.com/packetprotector to book a demo now!
Links:
Many IEEE standards docs are available free with the IEEE Get Program, sign up for a free IEEE personal account) to download. Look under the Specification -- 802.1 group for these.
802.1AE: MAC Security (MACsec) Working Group Page - https://1.ieee802.org/security/802-1ae
802.1AE: MAC Security (MACsec) for PDF download via IEEE Get Program - ieeexplore.ieee.org/document/8585421
802.1AEdk-2023: MACsec Security Amendment 4: MAC Privacy Protection for PDF download via IEEE Get Program - ieeexplore.ieee.org/document/10225636
802.1AR: Secure Device Identity Working Group Page - https://1.ieee802.org/security/802-1ar
802.1AR: Secure Device Identity for PDF download via IEEE Get Program - ieeexplore.ieee.org/document/8423794
MACsec Key Agreement Protocol - Extreme Networks
documentation.extremenetworks.com/VOSS/SW/89/VOSSUserGuide/GUID-C8FADFC0-E2C0-4AAA-A205-0403E6D0F844.shtml
MACsec Explained: Everything You Need to Know - Rambus
rambus.com/blogs/macsec
Packet Protector is part of the Packet Pushers network. Visit our website to find more great networking and technology podcasts, along with tutorial videos, the Human Infrastructure newsletter, and loads more resources for building your IT career. packetpushers.net
