4.12. Using MACsec (IEEE 802.1AE)

Media Access Control Security (MACsec) encrypts and authenticates all traffic in LANs with the GCM-AES-128 algorithm. MACsec can protect not only your IP traffic, but also ARP and neighbor discovery or DHCP. MACsec operates in the different layer than IPsec or SSL and TLS. Combine MACsec with security protocols for other networking layers to take advantage of different security guarantees that these standards provide.
See the MACsec: a different solution to encrypt network traffic article for more information about the architecture of a MACsec network, use case scenarios, and configuration examples.